<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi Melissa,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We’ve <u>just</u> finished setting this up. In order to get around this our IT department changed the attributes sent from the user name and email to using our unique institution ID number. Then O’Reilly updated our UI so that the ID number
does not show on the webpage.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We feel that this does give our students protection as there is no way that O’Reilly could associate the institution ID with a particular student and their particular ID number will not show up when they use the product.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Karen<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Karen Kunz, MLS<o:p></o:p></b></p>
<p class="MsoNormal"><i>Technical Services and Systems Librarian</i><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Oregon Institute of Technology<o:p></o:p></b></p>
<p class="MsoNormal">3201 Campus Drive, Klamath Falls, OR 97601<o:p></o:p></p>
<p class="MsoNormal"><a href="mailto:Karen.kunz@oit.edu%20|"><span style="color:#0563C1">Karen.kunz@oit.edu |</span></a> 541.885.1769 | 541.885.1777 (fax)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://www.oit.edu/library"><span style="color:#0563C1">https://www.oit.edu/library</span></a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Eril-l <eril-l-bounces@lists.eril-l.org> <b>On Behalf Of
</b>Melissa Belvadi<br>
<b>Sent:</b> Thursday, August 5, 2021 10:31 AM<br>
<b>To:</b> eril-l@lists.eril-l.org<br>
<b>Subject:</b> [Eril-l] O'Reilly, Federated SSO, and patron identity privacy - question<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Hello, all.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">This question is for those of you who subscribe to the O'Reilly HIgher Education ebook package, formerly known as "Safari", and uses the Federated/SSO method of authentication, and whose campuses
have strong rules about patron privacy.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">It appears to us that the SSO configuration sends O'Reilly our patron's campus username, which makes it trivial for them to identify the human being and link that info to the books that person
reads on their platform if they did want to engage in that kind of data mining (they deny it, but some of us are skeptical).<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">We don't have any absolute rules on our campus about that, but we librarians are definitely not happy about it.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">I was wondering, those of you who are at institutions that do have stronger rules about patron privacy matters and who use this configuration, can you tell me what you did to deal with it? Did
you find a way to avoid sending O'Reilly that personally-identifiable username?<o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">Thanks!<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
<div id="Signature">
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124;background:white">Melissa Belvadi</span><span style="font-size:12.0pt;color:black">
<o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124">Collections Librarian<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124">University of Prince Edward Island<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124"><a href="mailto:mbelvadi@upei.ca" target="_blank">mbelvadi@upei.ca</a> 9</span><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#202124">02-566-0581</span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;color:#202124">ORCID iD: 0000-0002-4433-0189</span><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124">my <a href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Foutlook.office365.com%2Fowa%2Fcalendar%2F0fbab27c909e4493be65313bd66d66b6%40upei.ca%2F5fa60af92c6d451c9ddf90c0bb11e00f15552192987609852692%2Fcalendar.html&data=04%7C01%7Ckaren.kunz%40oit.edu%7C3cb04057eaab4df1fe7708d958371d4a%7Cf4db50f235d14e0694e2167755273558%7C0%7C1%7C637637816002805247%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=HyyrxjNDE43EJOWL11czQxttelg2EUiTl79KNM12U%2Bc%3D&reserved=0" title="https://outlook.office365.com/owa/calendar/0fbab27c909e4493be65313bd66d66b6@upei.ca/5fa60af92c6d451c9ddf90c0bb11e00f15552192987609852692/calendar.html">public calendar</a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124"><a href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmbelvadi.youcanbook.me%2F&data=04%7C01%7Ckaren.kunz%40oit.edu%7C3cb04057eaab4df1fe7708d958371d4a%7Cf4db50f235d14e0694e2167755273558%7C0%7C1%7C637637816002815211%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=LeAnWCTXxrubMCNO39hfyGr0mVmKcgmvTY4YW5J1%2BlI%3D&reserved=0" target="_blank">Make
an appointment</a> via YouCanBookMe<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:#202124"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>