Two Step Sign-In
Two Step Sign-In (TSSI) is required for all staff who wish to access Office 365 services and the VPN when not on the campus network.
TSSI provides added security to your account, ensuring that it cannot be used without your knowledge.
With TSSI, you will be prompted to confirm your identity by a separate method - typically through a code provided by text message to your mobile phone.
Without access to your physical mobile device, remote attackers can’t pretend to be you to gain unauthorised access to your account.You will receive a TSSI prompt when logging on to the following services from off campus:
- Office 365
Setting up Two Step Sign-In
For single user (personal accounts)
TSSI is setup during your first sign in to Office 365 (office.tcd.ie)
- Sign in, using your Trinity username (email@example.com) and computer login password
- You will see the prompt below, click on Next, to begin the setup.
- On the next screen you need to select the method to verify your sign-in from now on. Choose Authentication Phone from the first dropdown.
- Select your country code from the dropdown (typically Ireland 353+, unless your phone package is from another country) and enter your mobile number.
- Select a method, either Send me a code by text message or Call me. We recommend the Send me a code by text message option.
- Click on Next
- You will now receive a text message from Microsoft to your mobile number provided above.
- Enter the code into the additional security verification window as below, and click Verify
- When the code is verified, on the next screen click Done. You have now completed the setup.
You will see a final screen which gives you an App Password, to learn more about this please read our Frequently Asked Questions page. Please note this screen refers to Outlook and Office as non compatible products with Two Step Sign-In, this is in reference to older versions of Outlook and Office (2013 and older) It is fully compatible with the latest versions.
For multiple users (non-personal accounts)
- Download the Microsoft Authenticator app (Android | iOS)
- Browse to office.tcd.ie and sign in, using your Trinity username (firstname.lastname@example.org) and computer login password. After you choose Sign in, you will be prompted for more information.
- Choose Next. The recommended authentication method for multiple users is to use the free Microsoft Authenticator app. If you have it installed on your mobile device, select Next and follow the prompts to add this account.
- Click Next to proceed.
- When the Scan the QR code screen appears, open the Microsoft Authenticator app on your mobile device.
- Click the + symbol to add an account and choose Work or school account.
Please note: If you already have an account set up on the Microsoft Authenticator app, you can just tap the three dots in the top right corner in the app and select + Add Account.
- Select Scan a QR code. (Please note: iPhone users may have to enable the camera in Settings in order to scan the code.)
- If you can't use your phone camera, you can manually enter the 9-digit code and the URL. You can view these by clicking on the Can’t Scan Image? button below the QR code.
- You will be shown a six-digit code and your account is added.
- Switch back to your computer and click Next.
- The system will send a notification to your device.
- Click Approve on the app as the second step of verification.
- When the Notification Approved message appears, click Next.
- You are now set up and secure.
Adding a new user or device
- Browse to office.tcd.ie and sign in, using your Trinity username (email@example.com) and computer login password.
- Once you are logged in, click on your profile icon at the top right (usually your initials or the initials of the account). Then choose My account.
- From the left panel, choose Security info. Then click the + Add method button.
- From the Which method would you like to add?, choose Authenticator app and click OK.
- Follow steps 4 to 13 in the Setting up Two Step Sign-in for Multiple Users section above.
- Once a new device has been added, a new entry will appear with your device name.
- The final step is to change the Default sign-in method to Authenticator app or hardware token – code. This will allow you to use the code from your authenticator app instead of the pop-up notification, the preferred option for multiple users.