Tarleton uses Microsoft Authenticator for multifactor authentication (MFA). MFA adds a second layer of security to protect accounts and transactions, and is required for all Tarleton accounts. This guide will go over how to set up and use Microsoft Authenticator with your Tarleton account.
Table of Contents
This guide is intended for new Tarleton students, faculty, and staff needing to set up Microsoft Authenticator for the first time. If you need to restore Microsoft Authenticator after deleting the app or switching phones, please use the "Restore Microsoft Authenticator"
guide.
Download Microsoft Authenticator
You will need to download the Microsoft Authenticator app to your smartphone. The app is available for free for both iPhone and Android.
If you don't have a smartphone or prefer not to use one, please contact ITS to request an alternative hardware token. You can call the Service Desk at 254-968-9885 or submit a ticket to request a hardware token.
Multifactor Authentication Service Request Form
Instructions
On an iPhone, open the Apple App Store.
On an Android, open the Google Play Store.
If prompted, log in with your Apple or Google ID.
Tap on Search.
In the search field, type "Microsoft Authenticator."
Find Microsoft Authenticator.
It is usually the second item listed, with the first item being an unrelated ad. Be sure you are downloading only "Microsoft Authenticator".

Download Microsoft Authenticator, following your smartphone's instructions.
Close the App/Play Store, find the Microsoft Authenticator app, and tap on it to open.
Add Your Tarleton Account to Microsoft Authenticator
Once you have the Microsoft Authenticator app installed and open, you will need to use a computer or another device to log in to your Tarleton account and link it to the app.
Instructions
Using a computer or a device other than your smartphone, open a web browser and go to https://office.com.
Click Sign In and enter your Tarleton email address and password.

You may be asked to verify your identity by receiving a text or call to your personal phone number associated with your Tarleton account.
A window titled "More Information Required" will appear. Click Next.

The next step is to connect your Tarleton account to your Microsoft Authenticator app. Click Next through the next two windows until you see a QR code.
Keep the page with the QR code up and go back to your smartphone.

Open Microsoft Authenticator.
If opening for the first time and want to add an account, select Work or School Account, then add it using a QR code.
If the Microsoft Authenticator app has already been opened, then go through these steps for the same result:
Tap on the + button in the upper right.

Select Work or School Account.

Select Scan QR Code. If prompted for access to your camera, allow it.
Scan the QR code on the web page with your phone. This will add your Tarleton account to the Microsoft Authenticator app.
Go back to your other device with the web page open. Click Next on the web page.
An authorization test will occur. A two-digit code will appear on the web page, and you'll be prompted to enter the same two-digit code in Microsoft Authenticator on your phone.

After entering the correct code in Microsoft Authenticator, the web page will show a "Approved" notification. Click Next.

A success page will come up. You can click Next/Done.
If you do not already have a second sign-in method set up with Microsoft Authenticator, you will be prompted to do so.
It will default to a Phone option, which we recommend. Enter your smartphone number, make sure "Receive a Code" is selected, and then click Next.

If you do not wish to use your personal phone number for the second sign-in method, you can also set up your Tarleton office phone number. Skip to the section below about using your Tarleton office phone instead.
You will receive a text message with a verification code. Enter it into the next web page to confirm your phone number.
Once the Microsoft Authenticator setup is complete, the office.com site will appear, and you will be logged in with your Tarleton account.
Using the Tarleton Office Phone Instead of a Personal Smartphone
This is optional if you would prefer to use your Tarleton office phone rather than a personal phone number. Be aware that the office phone only supports voice call verification, and you can use this sign-in method only at your office.
Instead of entering a phone number, click "I want to set up a different method."

Click Choose a Method, and then select Office Phone.
Enter your Tarleton office phone number.
A verification phone call will come to your phone. Answer the phone and follow the directions from the call system.
Do NOT select email as a sign-in method. Tarleton email cannot be accepted, and personal email will not receive verification codes. You must use a phone number.
Once the Microsoft Authenticator setup is complete, the office.com site will appear, and you will be logged in with your Tarleton account.
Using Microsoft Authenticator When Signing In
When logging into most Tarleton resources, you will be prompted to use Microsoft Authenticator. It will occur after entering your password. This is what to expect with the process each time.
An Approve Sign In Request window will appear, displaying a two-digit code.

On your smartphone, Microsoft Authenticator will notify you of a sign-in request.
- Tap on the notification to go directly into Microsoft Authenticator.
- If you miss the notification, you can open the Microsoft Authenticator app directly.
In the Microsoft Authenticator app, enter the two-digit code and tap Yes.

The Microsoft Authenticator app will also ask for your smartphone's passcode. If you use fingerprint or face ID with your smartphone, then it may use that system instead.
After the two-digit code is entered and the phone's passcode is confirmed, it will transmit the all-clear for your login attempt.