Stanford University

What is WebLogin?

Also see: Advanced Settings

Why am I being asked to log in?

The web-based service you requested requires that you identify yourself using your Stanford University Network (SUNet) ID. You must provide your SUNet ID and password to continue to the requested service or web page. (If you don't have a SUNet ID, see What if I don't have a SUNet ID, below.)

Under this system, called Web Authentication, or WebAuth, your single WebLogin gives you access to many other Stanford web sites besides the one you requested. In essence, you receive two keys when you log in: a key to the specific web site or service you requested, and a "master" key that opens other protected web sites as well. Those sites will admit you without requiring that you log in again. Note, however, that some Stanford services, such as Axess, always require that you enter your login information, even if you are already logged in through WebAuth.

The keys last until you quit your browser program, or until they expire (they can last up to ten hours from the time of login). Be sure you have "turned in your keys" by quitting your browser before you leave your computer. Otherwise, someone else using the computer after you can get access to the Web—both to the sites for which you got specific keys as well as to any of the other Stanford web sites that accept the master key.

What am I supposed to do?

On the WebLogin page you came from (use the Back button or keyboard command to return to it), enter your SUNet ID and password and click on the Login button.

SUNet ID: Enter the login form of your SUNet ID, which is three to eight characters long.

Note: you had the option to create two email aliases when you created your SUNet ID. These are different from your SUNet ID and cannot be used to log in.

Password: Enter the password associated with your SUNet ID. If you have forgotten your password, you can reset it yourself.

What if I don't have a SUNet ID?

Most Stanford community members are eligible for a SUNet ID. To get one, go to Accounts. To find out more, see the SUNet ID documentation.

Why is WebLogin asking if I use this machine regularly?

For machines you use regularly, WebLogin will remember single sign-on credentials for 25 hours and remembers two-step authentications for up to 28 days in some circumstances. By unchecking this box, WebLogin will remember neither and you will have to log in again at the next WebAuth-protected site you visit.

Help! What did I do wrong?

Error messages and descriptions:

Missing or Incorrect SUNet ID and/or Password: To log in to Stanford WebAuth, you must provide both your SUNet ID and its password. It must be the login form of your SUNet ID, which is three to eight characters long (for more information on SUNetIDs, see What am I supposed to do?). If you have forgotten your password, go to Accounts to reset it.

You must enable cookies on your web browser: Stanford WebAuth requires that your web browser accept "cookies," small files that web servers send to your computer. Cookies are used by many web sites for authenticating, tracking, and maintaining specific information about users, such as site preferences. WebAuth uses them for security and verification. Having a cookie for a Stanford WebAuthed web site identifies you to the site and allows you to continue from one page to another without having to log in each time. (Cookies are actually what makes the "master" key, referred to at the beginning of this page, work.) You can usually enable cookies in the Settings or Preferences panels of your browser program.

You took too long to login: You must enter your SUNet ID and password within two hours of the WebLogin screen appearing. If you don't, you will get this error message. You must re-initiate the request for the web page or service you want—that may mean re-entering the URL or returning to the page with the link to the service. Backing up to the WebLogin page and trying again will not work.

Why doesn't my password work?

You may be mistyping (be sure to check that the "caps lock" key is off) or you may have simply forgotten your password since you last changed it. To reset it, go to Accounts.

How can I sign on just once per session?

WebLogin also supports the HTTP Negotiate authentication mechanism. If you have already signed on to your computer with your SUNet ID and password, HTTP Negotiate allows you to avoid re-typing your password into WebLogin. HTTP Negotiate provides single sign-on capability for a limited set of browsers and operating systems. To learn more, see the Configuration help page.)

More information about WebAuth and WebLogin is available on the Stanford WebAuth service site.

Why am I being asked to enter an authentication code?

When additional security is required, you are asked to enter a two-step authentication code. Each code can only be used once. Codes are delivered by an SMS message, authenticator app on a mobile device, or printed list.

You can be prompted for a code in a variety of situations including:

Once prompted, you must enter a code to log in. If you are unable to enter a code, please call the Help Desk 650-725-4357 (5-HELP) to verify your identity and have two-step authentication reset. You can change your two-step authentication methods and settings at Accounts.