Bastion Access
To access IRT-Bastion, we use a two-factor authentication system run by Duo Security, an easy and flexible method that allows authentication via smartphone. Through the Duo Push app, users can log in to Bastion using an iPhone, Android, Blackberry, or Windows phone.
Logging into Bastion | Requesting Bastion Access | Help
Getting started with Duo Security
- Set up an account by going to https://irt-bastion.stanford.edu/.
- Enter your SUNet ID and password to log in.
- Add Phone
- On the next page, enter your cell phone number (smartphone or otherwise). (If you don't have a cell phone, enter a primary phone number that would be accessible on login.) Select the appropriate phone type.
- Select either "call me" or "text me" to receive a verification code to enter into the text field, and continue.
- Install Duo Mobile
- If you have a supported mobile phone, you should install Duo Mobile; click on the link to receive a link to the download page. (Note: if you already have the app installed, you can click "I already have DuoMobile installed.")
- Open the app, click "Add Account," select "Duo Security," and then photograph/scan the QR code visible on the login web page. (If you already had the app installed, click the link for activation via email, and visit the activation link on your mobile device's browser. You can then delete your previous "Stanford School of Medicine" account.)
- Click "Continue" to move on to the next step.
- Bastion Login
- You'll be at "My Settings & Devices," where you can confirm your number and the other existing settings. To proceed to the login page, click the green "Continue to Login" button at the bottom. If the enrollment process worked, you will then be presented with the regular login page; see authentication and login instructions below.
For a more detailed walkthrough of the enrollment process, visit guide.duosecurity.com and click on your specific phone type.
Authenticating via Phone or Passcode
- After you've logged in with your SUID, and finished enrolling your phone, the system will ask for a secondary verification. When logging in, you can select one of three options for your secondary verification method:
- Duo Push App: Select "Send me a Push." You'll receive a push notification on your cell phone; touch "View" to see the prompt, and "Approve" to log in. In order for this method to work, you should be connected to WiFi or have a working data connection.
If you ever get a request you weren't expecting, you can touch "Deny" to reject it. You'll be able to report it, if it was a fraudulent request from someone else—or, tap "It was a mistake" to cancel without reporting it. - Phone Call: Select "Call Me." The system will call your primary phone number; just answer the call and press any key on your keypad to authenticate.
- Passcode: Select "Enter a passcode." The field will slide open for you to enter a passcode, obtained one of the following ways:
- Duo Push App: You can visit the Duo Push app on your phone and tap the key icon for a passcode. (This will work whether or not you have a working data connection.)
- SMS: Click on the link "Text me new codes " and you'll receive an SMS with a batch of ten different passcodes to hold in reserve. The webpage should give you a hint, telling you the starting digit of the next valid passcode on your list; the first one starts with a '1xxx', then a '2xxx', and so on. You can save this list of codes, which will work whether or not your phone is currently connected to a data network. (When you ask for a new list of passcodes, the old list is invalidated, so it would be best to delete it.)
- Physical Token: Plug the token into a USB slot on your computer. Make sure there's a cursor in the text field for "Passcode," and then touch the circle on the token; it should automatically enter a code into the box. (If this doesn't work, try flipping the token around in the slot; it fits both ways, but only one way is the right way.)
- Duo Push App: Select "Send me a Push." You'll receive a push notification on your cell phone; touch "View" to see the prompt, and "Approve" to log in. In order for this method to work, you should be connected to WiFi or have a working data connection.
- If you'd like to add other phone numbers as authentication options, Duo Security allows you to add and manage other devices. (This way, you can log in via SMS to another phone, or with a call to your home or office phone, in case you don't have your cell phone with you.)
- Once you've enrolled a primary phone number, just go to https://irt-bastion.stanford.edu/ and click on the link to the left that says, "Add a new device." You will be asked to authenticate with your primary phone number, and then the next screen will walk you through adding a new mobile phone, tablet, or landline.
To change your primary phone number or default authentication settings, click on the link to the left for "My Settings & Devices." You can switch between default devices, rename your devices for easier management ("Cell Phone," "Home," "Office," etc.), and choose whether you'd like an automatic authentication request sent to your device upon login to Bastion.
Logging In
- Your first login to irt-bastion.stanford.edu should walk you through the steps and download Junos Pulse. To expedite the process, you might want to update your version of Java first; visit http://java.com/en/download/installed.jsp to see if you have the recommended secure version for your operating system; once you've updated Java, restart your web browser before proceeding.
- For login help and instructions, see Installing and Using Junos Pulse.
Need Help?
For more about Duo Security enrollment, and answers to some frequently asked questions, visit their user guide, at guide.duosecurity.com. For help with Bastion, Duo Security , or anything else, file a help ticket with IRT Security.