Download - ShibbolethAccess4librarians
![Page 1: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/1.jpg)
Glenn Wearen, HEAnet
Shibboleth Access for Librarians
![Page 2: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/2.jpg)
Identity Provider (IdP)• Authenticates user and provides user data • Personal data and/or non-personal data or none
Service Provider (SP)• Authorises access based on incoming data• Personalises experience based on incoming data• Persists the user experience between sessions• Extends user data with data entered by the user or file
Federation • Trust fabric between IdP and SP, uses SAML protocol
Edugate
![Page 3: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/3.jpg)
And lastly, the User
•Hates being repeatedly asked to login
•Wants one, and only one campus credential (or none at all)
•Will avoid websites that have ‘registration’
•Expects their profile (e.g. search basket, favourite article, alert prefererenes) to available from PC to Mobile Web.
Edugate
![Page 4: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/4.jpg)
Identity Providers• Institutes of Technology• Universities• Research agencies on the HEAnet network• VEC’s
Edugate
![Page 5: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/5.jpg)
![Page 6: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/6.jpg)
– Services Providers ( with a library focus)– Publishers – eBooks, Journals, Databases, Reference Managers
– On-campus services– Repository (eprints, dspace)– Web catalogue (III, Summon)
– Shared services– Collaborations, alliances, groups (e.g MyRI, IReL, LIR,
research.ie)
Edugate
![Page 7: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/7.jpg)
![Page 8: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/8.jpg)
Services Providers currently in progress– Elsevier
Services Providers invited• Westlaw IE
See tracking spreadsheet http://www.edugate.ie/content/edugate-members
Prospective members
![Page 9: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/9.jpg)
How it works?
![Page 10: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/10.jpg)
Library use-cases
Google Search Results.
• Less than 20% of staff start their search on the library website
• 0% in the case of students (http://twitpic.com/c8kakm)
• Where a search result takes a user to a publishers article abstract, and the publisher has ”Institution Login” or ”Shibboleth Login” option for full text of the article.
![Page 11: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/11.jpg)
Library use-cases
Library Systems integrationLMS integration SummonInstitutional Repository (on-campus or hosted)Catalogue integration
A-Z of electronic resources (DCU/CIT/DIT)MARC Record links in catalogue using WAYFless URL or Ezproxy links (Ezproxy supports Shibboleth login)
Reference Manager tools (Endnote Web/RefWorks)OpenAthens LA/MD integration
![Page 12: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/12.jpg)
Edugate on Campus
IT department sets up identity provider service (IdP)
Any other department can opt to accept a federated login (SP)• Teaching and Learning (VLE)
• IT Services (email)
• Library (LMS,IR)
• Same login credential and login session
![Page 13: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/13.jpg)
How to get publishers to participate?
• Have publishers used guest wifi access to justify higher licence costs.
• Has the IReL model licence (which includes Edugate) been used?
• Does the publisher offer personalised features?
• Does the publisher expect users to ‘register’?
• Does the publisher offer a mobile app?
• Your campus is preparing for IPv6
![Page 14: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/14.jpg)
How to get Ezproxy into Edugate?• Ezproxy supports Edugate natively• EZproxy login page uses campus identity provider service
• In production at http://remote.dcu.ie (Login)
![Page 15: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/15.jpg)
How to get Millennium into Edugate?• Native support for Shibboleth not available
• III+SSO+Shibboleth• SSO Module cost? Separate server for module?
• Shibboleth integration 1 day of effort approx.
• Patron and Active Directory account must match
• Even without the module, catalogue links to publishers content can still be changed to a WAYFLess url to bypass WAM
• SSO currently in production at http://library.ucd.ie (Login)
![Page 16: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/16.jpg)
How to get Summon into Edugate?• Native support for Shibboleth not available.
• Summon + Ezproxy + Shibboleth
![Page 17: ShibbolethAccess4librarians](https://reader036.vdocuments.us/reader036/viewer/2022081413/546b8d72b4af9f842c8b4d8f/html5/thumbnails/17.jpg)
Authorisation