How to set up a SLAC Guest account

Overview

This document outlines the process for creating a SLAC Guest account. A SLAC Guest account is a federated identity option for Guests whose organizations are not on the list of trusted institutions shown on the login screen for certain SLAC systems. It uses your email address as a username.

IMPORTANT--Read before proceeding:

1. Register a SLAC Guest account only if you do not have a Stanford SUNetID and have no associated Institution among those listed in the login page. 
2. Even if you have a SLAC computing account ([username]@slac.stanford.edu), do not use the "SLAC Login" option for federation.
3. SLAC Guest accounts require multi-factor authentication (MFA) for security. You will be prompted to set up MFA during account activation.
4. Before you can use a federated account (including a SLAC Guest account) to log into any SLAC application or system, you must have registered in the SLAC Guest Gateway and completed the step to verify your federated account. This step links your federated account to your SLAC identity number (SID#).
5. You only need one SLAC Guest account. You can use this account to log in to any SLAC system that supports federated login.

Creating your SLAC Guest account

When you register in the SLAC Guest Gateway, you will receive an email from identity-services-noreply@slac.stanford.edu with the subject line "Next Step: Link your federated account for SLAC access." You will receive this after you have received the "SLAC registration approved" email. Clicking the link in the "federated account" email brings you to the login page below. 

Note: You will also encounter this login page when accessing SLAC systems and applications that support federated login.

The “Click here for Help” link on the login page opens this knowledge article.  

If you are not a member of one of the listed federated institutions, you will need to create a SLAC Guest federated account.

Do not click the SLAC Login option.

Note: You only need to create a SLAC Guest account once. If you have already established a SLAC Guest account before registering in the SLAC Guest Gateway, you will simply need to log into that account here to verify it and link it to your SLAC ID number (SID#).

1. Type “SLAC Guest” into the “Enter Identity Provider Name” field towards the bottom of the initial Login page. As you type “SLAC Guest” it will appear in the institution list. Once it appears, select it, and a “Login” page will appear.

2. If you already have a SLAC Guest account, enter your username and password here, then skip to step 11. Otherwise, select “Create Account”.

3. The "Create Account" page will display.

4. Fill in the information in the “Required Information” section.

• First Name (given name)
• Last Name (family name)
• Email Address 

Notes on the email address you select:

• You may use your personal email address.
• This email address will be used to log in to your SLAC Guest account and CANNOT BE CHANGED. 
• It must be an email account you can consistently access when logging in to SLAC systems and applications. If you lose access to your email account, you will need to re-register in the SLAC Guest Gateway and create a new SLAC Guest account using a new email address.
• Make sure you correctly enter your email address, or you will not receive the registration confirmation emails. 

5. Click the “Create” button. The following activation message will appear:

Activating your SLAC Guest account

6. You will receive an email from slac-iam@slac.stanford.edu with the subject "New Account Activation". Open the message and follow the instructions to complete your account activation. You may need to check your spam folder for this message.

If you do not receive the activation notification, contact your SLAC Host or the IT Service Desk.

7. Click the link in step 1 of the activation email, then set a password. 

8. Click the "Activate Account" button. You will see the following confirmation screen:

You will also receive the following confirmation via email from slac-iam@slac.stanford.edu:

9. Click the "Continue" button. You will be redirected to the Sign In page.

10. Sign in using the username (email address) and password you just created. A verification code will be sent to your email address.

11. Enter the code into the prompt and click "Confirm" to finish logging in.

12. After successful login, you will receive the following confirmation:

You have finished registering your federated SLAC Guest account. From now on, when you sign in to a SLAC system using your SLAC Guest account, a verification code will be sent to your email address.