[Eril-l] what major publisher/provider/platforms support SAML/SSO?

Thu Aug 31 09:05:19 PDT 2023

I'd like to ask about policies about attribute release. We discovered that
our campus IT was setting up SSO with library vendors without consulting us
if it was requested by a faculty member. Their default attribute release
includes personally identifying information (PII) like name and email
address. The Library's preference is to set up access using an anonymized
attribute like eduPersonUniqueId.

For those who are successfully setting up SSO with vendors, are you using
anonymized attributes or are you sending PII? Thanks in advance for any
information you can provide about your policies and experiences!

-Kathleen
_________________________________________
Kathleen M. Folger, Electronic Resources Officer
University of Michigan Library
312 Hatcher North
Ann Arbor, MI 48109-1190
V:(734) 764-9375
F:(734) 764-0259
kfolger at umich.edu
<kfolger at umich.edu>

On Thu, Aug 31, 2023 at 11:41 AM Electronic Resources in Libraries
discussion list via Eril-l <eril-l at lists.eril-l.org> wrote:

> Melissa,
>
>   Those attributes our codes your local schools IDP should be able to
> release to the vendor. Like student, faculty, member, etc.
>
> Bill
>
> On Thu, Aug 31, 2023 at 5:28 AM Electronic Resources in Libraries
> discussion list via Eril-l <eril-l at lists.eril-l.org> wrote:
>
>> Direct SSO with individual vendors - we can't afford OpenAthens, believe
>> me, I want it!
>> I don't fully understand the "attributes" thing, but I see codes listed
>> in our federation documents about us, under "attributes required" for our
>> idp server as:
>> • user identifier (eduPersonPrincipalName + eduPersonTargetedID) • person
>> name (givenName + sn) • email address • affiliation
>> (eduPersonScopedAffiliation)
>>
>>
>> Melissa Belvadi
>> Collections Librarian
>> University of Prince Edward Island
>> mbelvadi at upei.ca
>> My pronouns are ಅವರು/ಅವರನ್ನು
>> My emails are sent during the hours that I work and I understand that you
>> will respond during the hours that you work.
>> ------------------------------
>> *From:* Eril-l <eril-l-bounces at lists.eril-l.org> on behalf of Electronic
>> Resources in Libraries discussion list via Eril-l <
>> eril-l at lists.eril-l.org>
>> *Sent:* Wednesday, August 30, 2023 2:41 PM
>> *To:* Electronic Resources in Libraries discussion list <
>> eril-l at lists.eril-l.org>
>> *Subject:* Re: [Eril-l] what major publisher/provider/platforms support
>> SAML/SSO?
>>
>>
>> *CAUTION:* This email originated from outside of UPEI. Do not click
>> links or open attachments unless you recognize the sender and know the
>> content is safe. If you are uncertain, please forward to phishing at upei.ca
>> and delete this email.
>>
>>
>>
>> *WARNING:* The sender of this email could not be verified and may not
>> match the person in the 'FROM' field. Do not click links or open
>> attachments unless you recognize the sender and know the content is safe.
>> If you are uncertain, please forward to phishing at upei.ca and delete this
>> email.
>>
>>
>> Melissa,
>> Are you doing direct SSO as opposed to an intermediary like OpenAthens?
>> We only do that with VisualDx.  We use Ebsco's OpenAthens with almost
>> everyone and then use their OpenAthens proxy server when they cannot handle
>> OpenAthens.  Also, what attributes are you releasing?  Email only?
>> Hal
>>
>>
>>
>> Hal Bright, MLS, AHIP
>>
>> University Library Director | ASDOH, CCPA Liaison Librarian
>> *(he, él)*
>> A.T. Still Memorial Library - A.T. Still University of Health Sciences
>> Arizona Campus    | Missouri Campus     | California Campus
>> 5850 E. Still Circle | 800 W. Jefferson St. | 1075 E. Betteravia Rd.
>> Mesa, AZ  85206   | Kirksville, MO 63501 | Santa Maria, CA 93454
>> P: 480.219.6036
>> https://www.atsu.edu/library
>>
>> *I value your response to my email messages, but respond according to
>> your schedule. No need to respond on evenings, weekends or holidays.*
>>
>>
>> <https://www.atsu.edu/>
>>
>>
>> <https://www.facebook.com/atstilluniversity>
>> <https://twitter.com/ATSU_news>
>> <https://www.instagram.com/atstilluniversity/>
>> <https://www.linkedin.com/company/a-t-still-university>
>> <https://www.youtube.com/user/atstilluniversity>
>>
>>
>>
>> *The ATSU Mission *A.T. Still University of Health Sciences serves as a
>> learning-centered university dedicated to preparing highly competent
>> professionals through innovative academic programs with a commitment to
>> continue its osteopathic heritage and focus on whole person healthcare,
>> scholarship, community health, interprofessional education, diversity, and
>> underserved populations.
>>
>>
>> *Proud recipient of INSIGHT Into Diversity’s 2017-21 Higher Education
>> Excellence in Diversity Awards.*
>>
>>
>>
>> [image: Mailtrack]
>> <https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality11&> Sender
>> notified by
>> Mailtrack
>> <https://mailtrack.io?utm_source=gmail&utm_medium=signature&utm_campaign=signaturevirality11&> 08/30/23,
>> 10:38:56 AM
>>
>> On Wed, Aug 30, 2023 at 5:43 AM Electronic Resources in Libraries
>> discussion list via Eril-l <eril-l at lists.eril-l.org> wrote:
>>
>> Hi, all.
>> I've been slowly trying to configure our vendors who support
>> SAML/SSO/WAYF for us, but with the upcoming browser changes about hiding IP
>> addresses, I want to move a bit faster.
>> I will admit from the start that I am not clear on the jargon about all
>> of this: I know we use Azure, and have an EntityID and are part of a
>> federation that is part of EduGain, but that's about it, so hopefully my
>> question makes sense.
>>
>> Does anyone have a list of the academic publishers/providers that I could
>> be contacting to get this configured?
>> So far I've done: EBSCO, Wiley, Elsevier, Springer, am in the middle of
>> doing JSTOR, and some parts of Proquest (RefWorks, O'Reilly).
>>
>> Who else is ready to configure this type of authentication if I can give
>> them the EntityID info?
>>
>> And is there by any chance some kind of online directory that lists the
>> providers and either URLs or contact information specifically for this
>> process?
>>
>> Thanks!
>>
>>
>> Melissa Belvadi
>> Collections Librarian
>> University of Prince Edward Island
>> mbelvadi at upei.ca  902-566-0581
>> ORCID iD: 0000-0002-4433-0189
>>
>> _______________________________________________
>> Eril-l mailing list
>> Eril-l at lists.eril-l.org
>> http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org
>>
>> _______________________________________________
>> Eril-l mailing list
>> Eril-l at lists.eril-l.org
>> http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org
>>
>
>
> --
>
> *Bill G. Kelm* *- Systems Librarian*
> Mark O. Hatfield Library
> Book a time with me: https://bit.ly/3xK6b1o
> <https://bit.ly/3xK6b1o>
> Linktr.ee: https://linktr.ee/billkelm
> Pronouns: he/him/his
>
> Office Phone: 503-375-5332
>
>
>
>
> _______________________________________________
> Eril-l mailing list
> Eril-l at lists.eril-l.org
> http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20230831/48101e9e/attachment.htm>