SLAC Guest Accounts for Existing Collaborators - LSSTDESC/slac-authentication-transition GitHub Wiki

Setting up a SLAC Guest account

Those without SLAC-approved federated identities or an existing SLAC Computing account, can create a SLAC Guest account to access DESC resources at SLAC.

Please check to see if you still have the email SLAC IT sent you back in October with the subject line: "Action needed to continue accessing SLAC resources". If you cannot find that email, please send email to [email protected] and we can have SLAC resend it.

Click the link in Step 1, where you will visit a page that looks like this:

use the text box at the bottom where it says "Enter Identity Provider Name" to search for "SLAC Guest"

Click on "SLAC Guest", this will bring up a login page:

Click "Create Account".

Fill in the form and click “Create". Make sure to enter your email address correctly with no typos. You can use any valid email address. Preferably, this should be permanent email account that you foresee having access to for a long time, such as gmail. Your email address will be your SLAC Guest account username.

Once you click "Create", you should see:

You will then receive an email from [email protected] with the subject “New Account Activation”

Click the link in the email to set your password in the web form. When you are finished, click "Continue".

You will receive an email from [email protected] with the subject line:”New Account Activated”.

Next, return to the original email from SLAC with the subject: "Action needed to continue accessing SLAC resources" and click that first link in Step 1 again. Choose "SLAC Guest" as your Identity Provider and log in with your new SLAC Guest credentials.

The first time you log in with your SLAC Guest credentials, you will be prompted to set up Two-Factor Authentication (2FA):

SLAC recommends Duo Mobile to ensure future compatibility with SLAC requirements for 2FA. When you are ready with your 2FA app, click Proceed. The next screen will include a QR code you can scan into your 2FA mobile app. You will then provide the pass code from your 2FA application, enter it in the text box and click Proceed.

Once you have completed the log in process, click "Continue". This will cause a new email with the subject: "Invitation to join SLAC Identity Portal" to be sent to you.

The email with Subject: Invitation to join SLAC Identity Portal" will include a web link that you should click to open another web form.

Please note - this link expires when it is clicked, you can only visit this link once.

You must complete all of the following steps, through clicking the "Submit" button. Otherwise, the process is aborted and we have to ask SLAC IT to reset your SLAC Identity Portal registration.

  • click Accept, then continue and agree to the SLAC "Terms and Conditions" by doing the following:
    • Click "Review Terms and Conditions"
    • Click "I Agree"
    • Click "Submit"

When you have completed this step successfully you should see (if you do not see this screen, something has gone wrong):

Once you click Submit and see the "Thank you for accepting the invitation" message, you will receive another email from the SLAC Registry Service confirming your initial registration has been completed and you will be told to complete Step 2 (rename).

Step 2

Return to the original email with the subject line: "Action needed to continue accessing SLAC resources"

This step requires that you know your external SLAC Crowd account username and password. If you need to reset your SLAC Crowd password, please send an email to [email protected].

When you click the web link for Step 2, you will open a web form.

  • Check to see if your SLAC Guest username appears to the right of "Your New Username" or if you see "Login to an Identity Provider"
    • If you see "Login to an Identity Provider", click it and log into your SLAC Guest account.
  • To the right of "SLAC Confluence/Jira Existing Password" you should see your old SLAC external Crowd/Confluence username, if not, type it in
  • Next Provide your password associated with your old SLAC external Crowd/Confluence username, this should be the last time you will need this account. If you have forgotten your old external SLAC Crowd/Confluence username or password, please email [email protected]
  • Click "Change Username" at the bottom of the form.
  • Please wait one full minute for the rename process to complete

That's it, you should be all set to log into SLAC Confluence!

Logging into SLAC Confluence

Point your web browser to: https://confluence.slac.stanford.edu/display/LSSTDESC/Home

  • use the text box at the bottom where it says "Enter Identity Provider Name" to search for "SLAC Guest"
  • Click on "SLAC Guest", this will bring up a login page:

Provider your SLAC Guest username and password and click "Login".

Forgotten Password

Point your web browser to: https://confluence.slac.stanford.edu/display/LSSTDESC/Home

  • use the text box at the bottom where it says "Enter Identity Provider Name" to search for "SLAC Guest"
  • Click on "SLAC Guest", this will bring up a login page:

Click "Forgot Password?"

Provide the SLAC Guest account username, which is the email you used when creating the account, and then click "Send Email".