In the Authenticator you have to switch the "Roaming Account" option when you enroll password-based unlock account or you can edit this option in the account settings after creation:
Please, note: the roaming feature applies ONLY to the unlocking feature with password-based accounts. You can lock only that workstation on which the Authenticator was enrolled.