University IT
How to Choose Your New Microsoft Login
This information is for the School of Medicine.
Stanford School of Medicine is moving to a new, more secure sign-in for Microsoft 365 (Outlook, Teams, SharePoint, OneDrive). Instead of a password, you'll verify your identity with an authentication method.
Start with Microsoft Authenticator — it's usually all you need. Adding a second method afterward is like keeping a spare house key: if your phone is ever lost or replaced, you're not locked out.
Most people: Use Microsoft Authenticator
If you have a smartphone, set up Microsoft Authenticator. This is the method Stanford recommends and the one our setup emails, guides, and support teams are built around. When you sign in, your phone will prompt you to enter the number shown on your screen, there's no password to type or remember. If you've used Duo, this will feel familiar. (Watch this video to learn more.)
You'll need an iPhone or Android phone that can install apps. Follow the instructions below for your device type to complete your setup.
- How to Set Up Microsoft Login with Authenticator (iOS)
- How to Set Up Microsoft Login with Authenticator (Android)
Once Authenticator is set up, you're done. Everything below is optional.
Optional: Add an Apple passkey for faster Mac sign-ins
If you work on a Mac, you can add an Apple passkey after setting up Authenticator. A passkey lets you sign in with Touch ID or your Mac's login password, with no need to pick up your phone. It's a convenience upgrade, not a requirement.
You'll need a Mac running a current version of macOS. Follow the instructions below to set up an Apple passkey.
No smartphone, or prefer not to use yours: Use a YubiKey
Note: YubiKeys do not work on SHC shared workstations.
If you don't have a compatible smartphone, can't install apps on your work or personal phone, or prefer to keep work sign-in off your personal device entirely, a YubiKey security key meets the same requirement. You'll plug the key into your computer and touch it when prompted.
You'll need a FIDO2-capable YubiKey (Series 5 or newer). Older Series 4 keys are not supported for Microsoft login. Follow the instructions below to set up your YubiKey.
Quick comparison
| Method | Microsoft Authenticator App | Apple Passkey | YubiKey Security Key |
|---|---|---|---|
| Suitable for | Most people, especially if you're comfortable with Duo and use your smartphone regularly | Mac users who want a faster sign-in | Those who prefer not use a phone or want a secondary failsafe authentication method. |
| What you need | iPhone or Android device | A Mac with current macOS |
FID02 YubiKey (Series 5+)
|
| How you sign in | Enter the number shown on your screen into the app on your phone | Touch ID or your Mac login password | Insert the physical key into your device and tap it when prompted |
| Works on | Any computer | Your Apple devices | Most computers with a USB port |
| Set up first? | Yes, start with Authenticator | Optional, after Authenticator | Only if Authenticator isn't an option for you |
| Setup instructions |
For additional assistance, contact SoM Entra ID / Intune support using any of the options listed below:
- SoM TDS Service Desk: Call (650) 725-8000 (option 7), available 6:00 a.m. - 10:00 p.m., 7 days a week. Hours have been expanded to handle increased demand.
- SoM Tech Bar: Schedule an appointment at the location nearest you.
- SoM Field Service Technician: Request an appointment at a time that works for you.
