Bastion Access

To access IRT-Bastion, we use a two-factor authentication system run by Duo Security, an easy and flexible method that allows authentication via smartphone. Through the Duo Push app, users can log in to Bastion using an iPhone, Android, Blackberry, or Windows phone.

Logging into Bastion | Requesting Bastion Access | Help

• Set up an account by going to https://irt-bastion.stanford.edu/.
• Enter your SUnet ID and password to log in.
• Add Phone
  1. On the next page, enter your cell phone number (smartphone or otherwise). (If you don't have a cell phone, enter a primary phone number that would be accessible on login.) Select the appropriate phone type.
  2. Select either "call me" or "text me" to receive a verification code to enter into the text field, and continue.
• Install Duo Mobile
  1. If you have a supported mobile phone, you should install Duo Mobile; click on the link to receive a link to the download page. (Note: if you already have the app installed, you can still click the installation link and open the webpage in order to proceed with the setup—or, you can click "skip this step" and complete the login through another verification method.)
  2. Open the app, click "Add Account," select "Duo Security," and then photograph/scan the QR code visible on the login web page. (If you already had the app installed, you should click the plus sign to add another account and scan the code, and then delete your previous "Stanford School of Medicine" account.)
  3. Click "Continue" to move on to the next step.
• Bastion Login
  • The next page should let you know whether the enrollment was successful; you will then be presented with the regular login page; see authentication and login instructions below.

For a more detailed walkthrough of the enrollment process, visit guide.duosecurity.com and click on your specific phone type.

• After you've logged in with your SUID, and finished enrolling your phone, the system will send a secondary verification to your phone. You have three options:
  1. Duo Push App: Select the "Duo Push" radio button, and then click "Log In" at the bottom. You'll receive a push notification on your cell phone; touch "View" to see the prompt, and "Approve" to log in. In order for this method to work, you should be connected to wifi or have a working data connection. 
     If you ever get a request you weren't expecting, you can touch "Deny" to reject it. You'll be able to report it, if it was a fraudulent request from someone else—or, tap "It was a mistake" to cancel without reporting it.
  2. Phone Call: Select the "Phone Call" radio button, and then click "Log In." The system will call your phone; just answer the call and press any key on your keypad to authenticate.
  3. Passcode:
     • Duo Push App: You can visit the Duo Push app on your phone and tap the key icon for a passcode. (This will work whether or not you have a working data connection.)
     • SMS: Click on the link "Send SMS passcodes," and you'll receive an SMS with a batch of ten different passcodes to hold in reserve. The webpage should give you a hint, telling you the starting digit of the next valid passcode on your list; the first one starts with a '1xxx', then a '2xxx', and so on. You can save this list of codes, which will work whether or not your phone is currently connected to a data network. (When you ask for a new list of passcodes, the old list is invalidated, so it would be best to delete it.)
     • Physical Token: Plug the token into a USB slot on your computer. Make sure there's a cursor in the text field for "Passcode," and then touch the circle on the token; it should automatically enter a code into the box. (If this doesn't work, try flipping the token around in the slot; it fits both ways, but only one way is the right way.)
       
• If you'd like to add other phone numbers as authentication options, Duo Security allows you to add and manage other devices. (This way, you can log in via SMS to another phone, or with a call to your home or office phone, in case you don't have your cell phone with you.) Once you've enrolled a primary phone number, just go to https://irt-bastion.stanford.edu/ and click on the button below that says "Manage Devices" (instead of "Log in"). You will be asked to authenticate with your primary phone number, and then the next screen will allow you to add other devices.

• Your first login to irt-bastion.stanford.edu should walk you through the steps and download Junos Pulse. To expedite the process, you might want to update your version of Java first; visit http://java.com/en/download/installed.jsp to see if you have the recommended secure version for your operating system; once you've updated Java, restart your web browser before proceeding.
• For login help and instructions, see Installing and Using Junos Pulse.