<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Verdana",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-NZ" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Our institution introduced “social authentication” (LinkedIn, Facebook and Google) as institutional single-sign-on options four weeks
ago. My reaction was:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US">“I don't understand the full detail of [Sept 28’s] news about the theft of 50 million Facebook access tokens by hackers. I have generally
avoided using social authentication (except each site's native authentication) and I am more resolute about avoiding it now. TBH, I laughed yesterday when I saw Facebook authentication on UoA SSO.”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US">But, our IT dept and EBSCO apparently think it’s ok. Personally, I’ll err on the side of paranoia for now.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana",sans-serif;color:#1F497D">Bob Pearson<br>
Digital Access Librarian<br>
The University of Auckland Library<br>
New Zealand<br>
<br>
</span><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Eril-l <eril-l-bounces@lists.eril-l.org>
<b>On Behalf Of </b>Neyer, Linda S<br>
<b>Sent:</b> Thursday, 1 November 2018 12:43 PM<br>
<b>To:</b> Harper, Cynthia <charper@vts.edu>; Hinchliffe, Lisa W <ljanicke@illinois.edu>; Divan, Linda A <divanl@cedarville.edu><br>
<b>Cc:</b> eril-l (eril-l@lists.eril-l.org) <eril-l@lists.eril-l.org><br>
<b>Subject:</b> Re: [Eril-l] Privacy and New EBSCO personal login feature - Google login<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Hi Lisa,
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">We’ve been testing it a bit, and the Google sign-on does
<b><i>not</i></b> allow users to remotely authenticate to databases -- they can only sign in to their MyEBSCOhost ‘shopping cart’ where they save searches, alerts, articles, etc. It’s a two-step process: first, authenticate (for us, using EZproxy), second,
log into your personal MyEBSCOhost account using either the login you create yourself or using your Google sign-on.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">It’s still a little buggy – doesn’t seem to work consistently with all browsers. Also, if a user has already created an account, logging in with
their Google sign-on doesn’t connect them to that account, it creates a new account.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">On principle I’m not comfortable with all the data big tech collects on us and won’t be using the sign-on myself, except for demo purposes. However,
our students will likely view it as a convenience to help them track their research more easily. If it helps them with citing their sources properly, then I think it will be useful. Of course, I may be missing something here. If so, maybe others can shed more
light on the topic.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Cheers,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-Linda<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black">---</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Linda Neyer, Associate Professor, MLS|MS</span><span lang="EN-US" style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Research & Instruction Librarian | Database Coordinator
<br>
Andruss Library 222</span><span lang="EN-US" style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Bloomsburg University of Pennsylvania</span><span lang="EN-US" style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">570-389-4801 |
<a href="mailto:lneyer@bloomu.edu"><span style="color:#0563C1">lneyer@bloomu.edu</span></a>
</span><span lang="EN-US" style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Eril-l <<a href="mailto:eril-l-bounces@lists.eril-l.org">eril-l-bounces@lists.eril-l.org</a>>
<b>On Behalf Of </b>Harper, Cynthia<br>
<b>Sent:</b> Wednesday, October 31, 2018 4:29 PM<br>
<b>To:</b> Hinchliffe, Lisa W <<a href="mailto:ljanicke@illinois.edu">ljanicke@illinois.edu</a>>; Divan, Linda A <<a href="mailto:divanl@cedarville.edu">divanl@cedarville.edu</a>><br>
<b>Cc:</b> eril-l (<a href="mailto:eril-l@lists.eril-l.org">eril-l@lists.eril-l.org</a>) <<a href="mailto:eril-l@lists.eril-l.org">eril-l@lists.eril-l.org</a>><br>
<b>Subject:</b> Re: [Eril-l] Privacy and New EBSCO personal login feature - Google login<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">You’re right. I was just knee-jerk reacting to the latest “feature” on EBSCO’s site that won’t work and our patrons will wonder why, but maybe we can have a
principled statement why we choose not to support it…<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">CH<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Hinchliffe, Lisa W <</span><span lang="EN-US"><a href="mailto:ljanicke@illinois.edu"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">ljanicke@illinois.edu</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">>
<br>
<b>Sent:</b> Wednesday, October 31, 2018 3:47 PM<br>
<b>To:</b> Divan, Linda A <</span><span lang="EN-US"><a href="mailto:divanl@cedarville.edu"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">divanl@cedarville.edu</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">>;
Harper, Cynthia <</span><span lang="EN-US"><a href="mailto:charper@vts.edu"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">charper@vts.edu</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">><br>
<b>Cc:</b> eril-l (</span><span lang="EN-US"><a href="mailto:eril-l@lists.eril-l.org"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">eril-l@lists.eril-l.org</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">)
<</span><span lang="EN-US"><a href="mailto:eril-l@lists.eril-l.org"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">eril-l@lists.eril-l.org</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">><br>
<b>Subject:</b> Privacy and New EBSCO personal login feature - Google login <o:p>
</o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#1F497D">I’ve changed the subject line because I’m going to shift the topic a bit. Am I the only librarian who is a bit alarmed at the idea of authenticating to a library
resource through Google and the privacy (like there is none?) implications? Someone please tell me I’m misunderstanding and explain that this is actually in keeping with the NISO Privacy Principles or something?
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#1F497D">Lisa<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#2F5496">**********************************************************************************************************<br>
</span><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#2F5496">Lisa Janicke Hinchliffe
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#2F5496">Professor/ Coordinator for Information Literacy Services and Instruction, University Library<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#2F5496">Affiliate Faculty, School of Information Sciences<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#2F5496">University of Illinois, 1408 West Gregory Drive, Urbana, Illinois 61801
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><a href="mailto:ljanicke@illinois.edu"><span style="font-family:"Calibri",sans-serif">ljanicke@illinois.edu</span></a></span><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#2F5496">, 217-333-1323 (v),
217-244-4358 (f)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#2F5496">**********************************************************************************************************
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Eril-l [</span><span lang="EN-US"><a href="mailto:eril-l-bounces@lists.eril-l.org"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">mailto:eril-l-bounces@lists.eril-l.org</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">]
<b>On Behalf Of </b>Divan, Linda A<br>
<b>Sent:</b> Wednesday, October 31, 2018 2:30 PM<br>
<b>To:</b> Harper, Cynthia <</span><span lang="EN-US"><a href="mailto:charper@vts.edu"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">charper@vts.edu</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">><br>
<b>Cc:</b> eril-l (</span><span lang="EN-US"><a href="mailto:eril-l@lists.eril-l.org"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">eril-l@lists.eril-l.org</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">)
<</span><span lang="EN-US"><a href="mailto:eril-l@lists.eril-l.org"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">eril-l@lists.eril-l.org</span></a></span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">><br>
<b>Subject:</b> Re: [Eril-l] New EBSCO personal login feature - Google login - and WAM<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Arial",sans-serif;color:black">We tried the Google authentication yesterday on-campus (not using EZproxy) in Firefox and Chrome and it worked fine. <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Arial",sans-serif;color:black">After seeing about problems with remote access, I used VPN to go off-campus (so we first authenticated through EZproxy to get to EBSCO ebooks) and in Firefox got a blank
screen, in Chrome an error message. <o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US"><br clear="all">
<o:p></o:p></span></p>
<div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial",sans-serif">Linda Divan<br>
Library Systems Co-ordinator<br>
Centennial Library<br>
Cedarville University<br>
251 N. Main St.<br>
Cedarville, OH 45314<br>
<br>
937-766-7843<br>
</span><span lang="EN-US"><a href="mailto:divanl@cedarville.edu" target="_blank"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">divanl@cedarville.edu</span></a><o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US">On Wed, Oct 31, 2018 at 3:20 PM, Harper, Cynthia <<a href="mailto:charper@vts.edu" target="_blank">charper@vts.edu</a>> wrote:<o:p></o:p></span></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">So, after all our work making sure users can create personal accounts on EBSCO ebooks when we’re using WAM, we now see that they’ve enabled Google authentication.
And of course, it does not work with WAM (redirecting host site <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__0-2Dauth-2Debsco-2Dzone.librarycatalog.vts.edu&d=DwMGaQ&c=HS1CjnFyfzCL6mp0nkGYYw&r=x3WD-kxlrre-X6msdfrKCcl0xH5zliYcTd9f4iDeT4U&m=8myANw1ux_2fBfXLi6SVkpQ9YdtbvoPlLzNUxLVDhJo&s=0xhDkobV63Q25JfwIeKLpJVmVxTGufkk2SoP7j468M0&e=" target="_blank">
0-auth-ebsco-zone.librarycatalog.vts.edu</a> not recognized.) So I’m wondering if I turn off the WAM proxying of auth.ebsco.zone would Google authentication work???? I’ll ask EBSCO, but I thought I’d ask if anyone else has had a chance to look at this???<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US">Cindy Harper<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US"><br>
_______________________________________________<br>
Eril-l mailing list<br>
<a href="mailto:Eril-l@lists.eril-l.org">Eril-l@lists.eril-l.org</a><br>
<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.eril-2Dl.org_listinfo.cgi_eril-2Dl-2Deril-2Dl.org&d=DwMGaQ&c=HS1CjnFyfzCL6mp0nkGYYw&r=x3WD-kxlrre-X6msdfrKCcl0xH5zliYcTd9f4iDeT4U&m=8myANw1ux_2fBfXLi6SVkpQ9YdtbvoPlLzNUxLVDhJo&s=rsfRBCtzNp6JnqE3Kyzne5VPx8hpwNJDY6e15wDs5rc&e=" target="_blank">http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org</a><o:p></o:p></span></p>
</blockquote>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
</div>
</body>
</html>