SLAC Guest account creation
Table of Contents
Overview
This document outlines the process for creating a SLAC Guest account. A SLAC Guest account is a federated identity option for Guests whose organizations are not on the list of trusted entities shown on the login screen for certain SLAC systems. It allows you to register using your own email address and password.
You do not need a SLAC Guest account if you have a SLAC Active Directory (aka Windows) account, a SUNet ID (Stanford username), or are a member of a listed federated institution.
SLAC Guest accounts require two-factor authentication (2FA) for security.
- You will be prompted to set up 2FA during the account creation or activation process.
- Duo Mobile is the preferred and supported 2FA app at SLAC. Please install Duo Mobile on your phone before proceeding if you do not already have it.
Setting up your SLAC Guest account
Creating your SLAC Guest account
If you are accessing a SLAC web application that has federation enabled, you will be presented with the following discovery page. The discovery page allows login using either Stanford or SLAC credentials, or by selecting your home institution from a list of federated institutions.
The “SLAC Guest” link on the discovery page links to this knowledge base article, which steps you through the process.
If you are not a member of one of the listed federated institutions, you may type “SLAC Guest” into the “Enter Identity Provider Name” field towards the bottom of the discovery page. As you type “SLAC Guest” it will appear in the institution list. Once it appears, select it, and a “Login” page will appear.
Select “Create Account” from the login page.
The "Required Information" screen will display.
Fill in the following information on the “Required Information” page.
- “First Name” (given name)
- “Last Name” (family name)
- “Email address”
Notes on the email address you select:
- Please select an email address that you persistently use.
- You may use your personal email address.
- This email address will be used to log in to your SLAC Guest account and CANNOT BE CHANGED.
- Make sure you correctly enter your email address, or you will not receive the SLAC Guest account registration confirmation email.
Click the “Create” button.
The following activation message indicates that an email was sent to the email address you provided for verification.
Activating your SLAC Guest account
When you receive the "New Account Activation" email, select the link or copy and paste the link into a browser. You may need to check your spam folder for this email.
If you do not receive the activation notification, ask your SLAC host or point of contact to contact the IT Service Desk.
Enter a password and password confirmation following the password rules indicated on the right. Once complete, click the Activate Account button.
Read the above message and click the Continue button.
Check your email for an "Account Activated" confirmation email
Logging in with your SLAC Guest account
After activating your account, you may use it to log into SLAC applications that support federated login.
When you see the discovery page, select SLAC Guest from the list. Enter the email address you registered with and the password you set, then click the Login button.
Enrolling in two-factor authentication
The first time you log in, you will be asked to enroll in 2FA to proceed.
Note: Duo Mobile is the preferred and supported 2FA app at SLAC. Please install Duo Mobile on your phone before proceeding if you do not already have it.
Read the 2FA message, then click the Proceed button.
Enrolling using the QR Code
Open the Duo Mobile app on your mobile phone.
Click the "Add" button.
Select the "Use QR code" option and hover over the previous QR code.
You can leave the "Account name" as is, or change it to a simpler identifier for your SLAC Guest account.
This will save the DUO profile on your DUO app.
Enrolling using the secret key
To use the secret key option instead of the QR code, click the "Show Secret Key" button under the QR code.
An example of a secret key:
In the Duo Mobile app, paste the Secret Key into the Activation Code field, then click Next.
Once the account is added, it will appear on your list of 2FA accounts.
Copy the generated 6-digit passcode, then paste or enter it into the 6-digit number field.
Clicking the Proceed button will complete the authentication and return you to the app you were trying to access.
