<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Probably. I don’t have much to do with that end of things. My understanding of how EZproxy works is rudimentary.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">When you test with the unproxied URLs, are you being prompted to log in when you link to Ebook Central? For us, it doesn’t make any difference whether we use
proxied or unproxied URLs. The behavior is the same. Once you are automatically authenticated by EZproxy, you end up using that same hashed identity.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">I did speak with the person who manages our proxy server. He said that the only way to “fix” the problem and still use EZproxy is to require on campus users
to log in just like remote users—for everything, not just Ebook Central. That is something that we are not prepared to do at this time. (He did mention one alternative: to set up a second proxy server just for Ebook Central. The cost in dollars and in staff
time to manage it means this is a non-starter.)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Linad<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Melissa Belvadi <mbelvadi@upei.ca>
<br>
<b>Sent:</b> Friday, September 28, 2018 1:54 PM<br>
<b>To:</b> Fox, Linda J. <FoxLJ@umkc.edu><br>
<b>Cc:</b> eril-l <eril-l@lists.eril-l.org><br>
<b>Subject:</b> Re: [Eril-l] Proquest EbookCentral, single signon, ezproxy - question about weird problem<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">I'm guessing you are using the A directive in ezproxy to keep on-campus users proxied but without prompting?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">We had some of that on, but turned it off for our Proquest EbookCentral stanza as part of testing this, and it didn't seem to have any effect.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">Also we see the problem when we carefully text with completely unproxied URLs, so the proxy server stanza is playing no role at all, at least not in the first clicks - we have no idea what Proquest
is saying/getting from our proxy server when they do their SSO thing.<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><br clear="all">
<o:p></o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">Melissa Belvadi<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Collections Librarian<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">University of Prince Edward Island<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="mailto:mbelvadi@upei.ca" target="_blank">mbelvadi@upei.ca</a> <a href="http://www.google-analytics.com/collect?v=1&tid=UA-5663860-1&cid=109230&t=event&ec=email&ea=open&el=mbelvadi%40upei.ca&cs=newsletter&cm=email&cn=PLP"><span style="font-family:"Arial",sans-serif;color:#1155CC"> </span></a> <span style="font-size:9.5pt">902-566-0581</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">my <a href="http://www.google.com/calendar/embed?src=mbelvadi%40upei.ca&ctz=America/Halifax&mode=week" target="_blank"><span style="font-family:"Arial",sans-serif;color:#1155CC">public calendar</span></a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://mbelvadi.youcanbook.me/" target="_blank">Make an appointment</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Fri, Sep 28, 2018 at 3:43 PM, Fox, Linda J. <<a href="mailto:FoxLJ@umkc.edu" target="_blank">FoxLJ@umkc.edu</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Hi, Melissa,</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">We’re seeing a problem that sounds remarkably similar to what you describe. We’ve harrowed it down
to a specific circumstance. Even though we don’t have to proxy the links to Ebook Central, we choose to do so for the sake of consistency. We can reliably trigger this behavior if we are logged into our campus network. We have configured EZproxy not to
prompt for credentials when users are on the campus network because they have already authenticated at that point. So if I follow a proxied link to another database, say Academic Search Complete, I’m automatically “logged in” to the proxy server. If I then
follow a link to Ebook Central, the proxy server “knows” that I’ve already authenticated, and doesn’t prompt me for my username and password. It instead passes along some sort of generic username—and like you it always seems to be the same one. If I actually
log out of the proxy server and then link to the same ebook, I am prompted to log in, and the username is different.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">We have been working with ProQuest on this for months, with no real progress. I was just thinking
about touching base with our EZproxy expert to where the ticket is. If I learn anything more, I’ll pass it along.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Linda</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Linda Fox<br>
Senior Library Information Specialist<br>
UMKC University Libraries<br>
Miller Nichols Library <a href="https://maps.google.com/?q=Room+304+%0D%0A800+E+51&entry=gmail&source=g">
Room 304</a><br>
800 E 51<sup>st</sup> Street<br>
Kansas City, MO 64110</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="https://library.umkc.edu/" target="_blank">https://library.umkc.edu</a><br>
(816) 235-5290<br>
fax: (816) </span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">235-5531</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="mailto:foxlj@umkc.edu" target="_blank">foxlj@umkc.edu</a></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Eril-l <<a href="mailto:eril-l-bounces@lists.eril-l.org" target="_blank">eril-l-bounces@lists.eril-l.org</a>>
<b>On Behalf Of </b>Melissa Belvadi<br>
<b>Sent:</b> Friday, September 28, 2018 10:18 AM<br>
<b>To:</b> eril-l <<a href="mailto:eril-l@lists.eril-l.org" target="_blank">eril-l@lists.eril-l.org</a>><br>
<b>Subject:</b> [Eril-l] Proquest EbookCentral, single signon, ezproxy - question about weird problem</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif">Hi, I'm working with Proquest support on this but so far we're confused and I'm hoping someone else ran into this and found a solution.</span><o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif">This would only apply if you have Proquest Ebook Central configured to use their Single SignOn service. That enables users on campus
to get from our ezproxy server (without being bothered to login) a hashed identity code so they can use all of the interface features of someone with an account in the platform, without actually making one and revealing their identity.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif">What Proquest apparently does is talk to our proxy server, even when the link is not proxied and the user is on campus, to get that
hashed identity code. The user is not prompted for a username/password in this, so I'm not sure how ezproxy could even be doing this.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif">We're finding that multiple users are getting the same hashed identity. The way this showed up is when one staff member used up most
of the allocation of pages that could be downloaded, and another staff member on a different computer accessed the same book, they saw the allocation already used up. They brought it to me, where I verified on my own computer in three different web browsers
the same problem. You can see the problem by looking in settings-profile and note the same hashed-garbage username in all of the affected sessions throughout all those different computers and browsers.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif">Have any of you seen this before and if so, did you find a solution short of abandoning the SSO service from Proquest?</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Melissa Belvadi<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Collections Librarian<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">University of Prince Edward Island<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="mailto:mbelvadi@upei.ca" target="_blank">mbelvadi@upei.ca</a> 902-566-0581<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">my <a href="http://www.google.com/calendar/embed?src=mbelvadi%40upei.ca&ctz=America/Halifax&mode=week" target="_blank"><span style="font-family:"Arial",sans-serif;color:#1155CC">public calendar</span></a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://mbelvadi.youcanbook.me/" target="_blank">Make an appointment</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>