General
SLAC Guest account creation
Table of Contents
Overview
SLAC National Accelerator Laboratory supports three types of authentication:
- A SLAC ID, which are issued to SLAC employees and those closely affiliated with SLAC as their primary authentication method
- Federated Authentication , which is primarily used by collaborators and facilities users. SLAC offers identity federation with hundreds of trusted institutions worldwide. Once you are registered, external collaborators can use their home institutions credentials to authenticate to SLAC resources.
- SLAC Guest Accounts, which is used by external collaborators and contractors who cannot use identity federation
Not all SLAC computing services are available to all three types of accounts.
This document outlines the process for creating a SLAC Guest account. A SLAC Guest account allows you to register with an email address and password, along with two-factor authentication (2FA, MFA). You do not need a SLAC Guest account if you have a SLAC username, a SUNet (Stanford username), or are a member of a listed federated institution (University or research organization).
The SLAC Guest account requires the use of Two-Factor authentication (2FA, MFA). You will need to configure an app such as Duo Mobile to use 2FA.
Setting up your SLAC Guest account
Creating your SLAC Guest account
If you are a non-employee accessing a SLAC web application you will be presented with the following discovery page. The discovery page allows for login access using either Stanford or SLAC login credentials, or logging in by selecting your home institution from a list of federated institutions.
If you are not a member of one of the listed federated institutions, you may type “SLAC Guest” into the “Enter Identity Provider Name” field towards the bottom of the discovery page. As you type “SLAC Guest” it will appear in the institution list. Once it appears, select it by clicking on it and “Login” page will appear.
Note: The “SLAC Guest” link connects to this Knowledge Base article to step you through the process.
Select “Create Account” from the login page.
The "Required Information" screen will display
Fill in the following information on the “Required Information” page.
- “First Name” (given name)
- “Last Name” (family name)
- “Email address”
Notes on the email address you select:
- Please select an email address that you persistently use.
- You may use your personal email address.
- This email address will be used to login to your SLAC Guest account and CANNOT BE CHANGED.
- Make sure you correctly enter your email address or you will not receive SLAC Guest account registration confirmation email.
Click on “Create”
Activating your SLAC Guest account
The following activation message indicates an email was sent to the email address you submitted for your verification.
You will receive a "New Account Activation" email, select the link or copy and paste the link into a browser. You may need to check your spam folder for this email. If you do not receive the activation notification at all, then you will need to contact your POC to get Service Desk/Identity Services support.
Enter a password and password confirmation following the password rules indicated on the right. Once complete select the Activate Account button.
Read the message and select the Continue button.
Check your email for an "Account Activated" confirmation email
Logging in with SLAC Guest account
After activating the account, you may now login. Enter your username (the email address you registered with) and the password you set. Select the Login button.
Enrolling in two-factor authentication
First time login will ask you to enroll in 2FA to proceed.
Note: SLAC recommends and supports Duo Mobile as the preferred 2FA app in the next steps.
Read the 2FA message and select the Proceed button.
Enrolling using the QR Code
Open your choice of 2FA mobile app on your mobile phone, in this example we'll be using Duo Mobile.
Click on the "Add" button.
Select the "Use QR code" option and hover over the previous QR code.
You can leave the "Account name" as is or you can change the name to an easier identifier for your SLAC Guest account.
Enrolling using the secret key
Alternatively you can use the secret key instead of QR code to add the account to your 2FA app. To use secret key click on the "Show Secret Key'"button under the QR code.
An example of a secret key:
On the 2FA mobile app paste the Secret Key into the Activation Code field.
Once the account is added, it'll appear on your list of 2FA accounts.
Take the generated 6 digit code and enter it in the 6 digit number field.
Once you click on Proceed you have completed the authentication and will be returned to the app you are trying to access.
