Skip to main content

Trinity College Dublin, The University of Dublin

Trinity Menu Trinity Search



You are here TCD Computer Account > Two Step Sign-In

Two Step Sign-In

Two Step Sign-In (TSSI) is required for all staff and students who wish to access services such as Office 365, MyZone, and the VPN (staff only) when not on the campus network.

TSSI provides added security to your account, ensuring that it cannot be used without your knowledge.

With TSSI, you will be prompted to confirm your identity by a separate method - typically through a code provided by text message to your mobile phone or via the Microsoft Authenticator app.

Without access to your physical mobile device, remote attackers can’t pretend to be you to gain unauthorised access to your account.

You will receive a TSSI prompt when logging on to the following services from off campus:

  • Office 365
  • VPN (staff only)
  • Core Portal
  • Trinity Web Systems
  • MyZone
  • SITS my.tcd.ie (staff only)

Setting up Two Step Sign-In

For personal accounts

Setup for personal accounts

TSSI is setup during your first sign in to Office 365 (office.tcd.ie)

  1. Sign in, using your Trinity username (username@tcd.ie) and computer login password
  2. You will see a prompt asking for more information. Click on Next



  3. You will then be presented with the Keep your account secure screen.



    Your options are to verify your account via the Microsoft Authenticator app or via a Phone. Depending on the method you choose, the next steps will differ. Select the appropriate tab below for the next steps.

    1. To verify via a phone, click I want to set up a different method



    2. Select Phone from the dropdown and click Confirm



    3. You will then see the below screen



      • Select your country code and enter your mobile number
      • Choose, either Text me a code or Call me. We recommend the Text me a code option
      • Click on Next

    4. You will now receive a code via text message from Microsoft. Enter the code in the box and click Next



      • If you chose, Call me, rather than Text me a code, you will receive an automated call from Microsoft. During the call you will be prompted to press a key on the keypad to progress

    5. Once the code is verified, you will see a message to say the phone was registered successfully. Click Next



    6. To complete the setup, click Done



    1. On your phone, install the Microsoft Authenticator app
    2. After you install the Microsoft Authenticator app on your device, on your computer choose Next



    3. Click Next again



    4. Once the Scan the QR code screen appears on the computer, open the Microsoft Authenticator app on the mobile device and follow the steps below:
      1. Open the Microsoft Authenticator app, and add a Work or school account
        • On Android, tap the in the top right corner and choose Add account > Work or school account
        • On iOS, tap the + in the top right corner and choose Work or school account
      2. Select Scan a QR code and point the mobile device camera at the QR code on the computer screen



        • iOS users may have to enable the camera in Settings to scan the code
        • If you can't use the mobile device camera, you can manually enter a code on the app by clicking on the Or enter code manually button. The code and URL needed can be found by clicking on the Can’t Scan Image? button below the QR code on the computer.
      3. You will then see a notification to say the account is added to the app
    5. Switch back to the computer and click Next



    6. Microsoft will send a notification to the Microsoft Authenticator app on the mobile device



    7. Click Approve on the app



    8. Once you see the Notification approved message appear on the computer, click Next



    9. To complete the setup, click Done

For non-personal accounts

Setup for non-personal accounts

You will need your computer and your mobile device to complete these steps. The recommended authentication method for multiple users is to use the free Microsoft Authenticator app.

  1. Browse to office.tcd.ie and sign in, using your Trinity username (username@tcd.ie) and computer login password. After you choose Sign in, you will be prompted for more information. Choose Next



  2. On your phone, install the Microsoft Authenticator app
  3. After you install the Microsoft Authenticator app on your device, on your computer choose Next



  4. Click Next again



  5. Once the Scan the QR code screen appears on the computer, open the Microsoft Authenticator app on the mobile device and follow the steps below:
    1. Open the Microsoft Authenticator app, and add a Work or school account
      • On Android, tap the in the top right corner and choose Add account > Work or school account
      • On iOS, tap the + in the top right corner and choose Work or school account
    2. Select Scan a QR code and point the mobile device camera at the QR code on the computer screen



      • iOS users may have to enable the camera in Settings to scan the code
      • If you can't use the mobile device camera, you can manually enter a code on the app by clicking on the Or enter code manually button. The code and URL needed can be found by clicking on the Can’t Scan Image? button below the QR code on the computer.
    3. You will then see a notification to say the account is added to the app
  6. Switch back to the computer and click Next



  7. Microsoft will send a notification to the Microsoft Authenticator app on the mobile device



  8. Click Approve on the app



  9. Once you see the Notification approved message appear on the computer, click Next to complete the setup



Adding new users/devices to non-personal accounts

The new user and the user who originally setup TSSI on the account will need to complete these steps together. The new user will need their mobile device.

  1. On your computer browse to office.tcd.ie and sign in using your non-personal username (username@tcd.ie) and password.
  2. Once you are logged in, click on your profile icon at the top right. Then choose View account.



  3. From the left menu, choose Security info. Then click the + Add sign-in method button.



  4. Choose Authenticator app from the dropdown and click Add




  5. You will then see the below screen



    • On the new user's mobile device, install the Microsoft Authenticator app
    • Once the app is installed, switch back to the computer, and click Next

  6. Click Next again
  7. Once the Scan the QR code screen appears on the computer, open the Microsoft Authenticator app on the mobile device and follow the steps below:
    1. Open the Microsoft Authenticator app, and add a Work or school account
      • On Android, tap the in the top right corner and choose Add account > Work or school account
      • On iOS, tap the + in the top right corner and choose Work or school account
    2. Select Scan a QR code and point the mobile device camera at the QR code on the computer screen



      • iOS users may have to enable the camera in Settings in order to scan the code
      • If you can't use the mobile device camera, you can manually enter a code on the app by clicking on the Or enter code manually button. The code and URL needed can be found by clicking on the Can’t Scan Image? button below the QR code on the computer.
    3. You will then see a notification to say the account is added to the app
  8. Switch back to the computer and click Next



  9. Microsoft will send a notification to the Microsoft Authenticator app on the mobile device



  10. Click Approve on the app



  11. Once you see the Notification approved message appear on the computer, click Next to complete the setup



  12. Once a new device has been added, on your computer a new entry will appear with their device name.


  13. The final step is to change the Default sign-in method to Authenticator app or hardware token – code. This will allow you to use the code from your authenticator app instead of the pop-up notification, the preferred option for multiple users.



Changing/adding sign-in methods

Change the verified phone number

To change to a different phone number, follow the below steps.

  1. Log into http://office.tcd.ie
  2. Click on your profile icon at the top right. Then choose View account.



  3. From the left menu, choose Security info
  4. Next to the number you want to change, click on the Change button



  5. Follow the prompts to register a new number

Add an alternative sign-in method

To add an alternative sign-in method, follow the below steps.

  1. Log into http://office.tcd.ie
  2. Click on your profile icon at the top right. Then choose View account.



  3. From the left menu, choose Security info. Then click the + Add sign-in method button.



    The most common options for an alternative sign-in method would be add a second (alternative) phone number or use the Microsoft Authenticator app. Select the appropriate tab below for details of how to add an alternative sign-in method.

    1. Select Alternative phone from the dropdown and choose Add



    2. You will then see the below screen



      • Select your country code and enter your mobile number
      • Choose Call me and click on Next

    3. You will receive a call from Microsoft. Answer the phone and follow the prompts



    4. Once the code is verified, you will see a message to say the phone was registered successfully. Click Done to complete the setup



    1. On your phone, install the Microsoft Authenticator app
    2. After you install the Microsoft Authenticator app on your device, on your computer select Authenticator app from the dropdown and choose Add



    3. Click Next



    4. Click Next again



    5. Once the Scan the QR code screen appears on the computer, open the Microsoft Authenticator app on the mobile device and follow the steps below:
      1. Open the Microsoft Authenticator app, and add a Work or school account
        • On Android, tap the in the top right corner and choose Add account > Work or school account
        • On iOS, tap the + in the top right corner and choose Work or school account
      2. Select Scan a QR code and point the mobile device camera at the QR code on the computer screen



        • iOS users may have to enable the camera in Settings to scan the code
        • If you can't use the mobile device camera, you can manually enter a code on the app by clicking on the Or enter code manually button. The code and URL needed can be found by clicking on the Can’t Scan Image? button below the QR code on the computer.
      3. You will then see a notification to say the account is added to the app
    6. Switch back to the computer and click Next



    7. Microsoft will send a notification to the Microsoft Authenticator app on the mobile device



    8. Click Approve on the app



    9. Once you see the Notification approved message appear on the computer, click Next to complete the setup



    It is recommended to use one app password per device. When you create app passwords you can assign a name to it to easily identify it, e.g. iPhone10. If the phone is changed in the future, you can delete this specific app password without affecting your other apps and devices.

    1. Select App password from the dropdown and choose Add



    2. You will be presented with the following screen



    3. Enter a name for the app password. This can be your device name such as iPhone10
    4. Then click on Next
    5. On the next window the 16-digit app password will be displayed
    6. Click on copy password to clipboard icon next to the password and click Done



    7. Paste the copied code into the application requiring the App password

Sign-in via an alternative method

If you have more than one TSSI method set up, Microsoft will either give you:

  • The option to choose a different method via a link on the screen



  • or display all the enabled options for your account



Removing old app passwords

You should delete an app password, if it is connected to a device that is lost, stolen or given to someone else.

To delete an app password:

  1. Log into http://office.tcd.ie
  2. Click on your profile icon at the top right. Then choose View account.



  3. From the left menu, choose Security info.
  4. Then click the Delete link next to the app password you want to remove.