<div dir="ltr"><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000">Hi Laura,</div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000">Once you set up SSO, you don't want to mix and match with EZProxy (if this is what you meant by proxy). Part of the URL for linking to EBSCOhost contains directions "&authtype=ip,sso" that will dictate how EBSCO looks to authenticate. There are a bunch of different choices based on your available options and the order is how it works through them. You can only have 2. We use ip,sso, it will look at the user's IP first and if in range it will not prompt the user for authentication to search and will NOT link them to their EBSCO account. If out of range (off-campus) then it will fail IP and will move to SSO and prompt for authentication. </div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000"><br></div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000">If unauthenticated within the IP range, if the user wants to login to their EBSCO account they click sign in and it will prompt for the SSO login.</div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000"><br></div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000">If you were to use EZproxy, if you add the proxy prefix to the URL and go through EZproxy, your users will get an error message when trying to login to their EBSCO account, because it's essentially double authenticating and our (DUO) SSO throws errors. </div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000"><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><p class="MsoNormal">~~~~~ <span style="font-family:arial;color:rgb(39,78,19)">Kara S. Hart </span></p></div><div><div style="font-family:arial"><font size="2" color="#274e13">Systems Librarian - Library & Technology Services <div style="font-family:arial,helvetica,sans-serif;display:inline">- </div>Wellesley College</font></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 16, 2024 at 8:49 AM Electronic Resources in Libraries discussion list via Eril-l <<a href="mailto:eril-l@lists.eril-l.org">eril-l@lists.eril-l.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-3833444592495805639">
<div lang="EN-US" style="overflow-wrap: break-word;">
<div class="m_-3833444592495805639WordSection1">
<p class="MsoNormal">Hello<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">We are in the process of setting up SSO authentication for our EBSCO databases. If you have done this, I have a couple of questions.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Current Situation (without SSO): A patron accesses a database via IP or proxy authentication. Once in EBSCO, patrons can view articles and book chapters without further having to authenticate. However, if they want to save a search,
create an alert or download a whole eBook, they have to create an EBSCO account and sign in.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Our hope was that with SSO, the only change in this scenario would be the patron logs in with their campus credentials.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">We are being told that if a patron accesses via IP or proxy, they will not be able to use their campus credentials for their EBSCO account. From what I understand, the SSO authentication would have to happen at the point they enter an
EBSCO and at that point they are already logged into their EBSCO account. Is this your experience on your campus? This seems to create an extra layer of friction in that the majority of our users do not utilize a personal account on EBSCO. Most are just
viewing articles or book chapters.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I would appreciate hearing how SSO access works on your campus.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thank you,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Laura Vogler<u></u><u></u></p>
<p class="MsoNormal">Associate Library Director<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="color:rgb(192,0,0)"><a href="https://library.wabash.edu/" target="_blank"><span style="color:rgb(192,0,0)">Wabash College Lilly Library</span></a> | 301 W Wabash Ave | Crawfordsville IN 47933 | P: 765.361.6215<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
_______________________________________________<br>
Eril-l mailing list<br>
<a href="mailto:Eril-l@lists.eril-l.org" target="_blank">Eril-l@lists.eril-l.org</a><br>
<a href="http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org" rel="noreferrer" target="_blank">http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org</a><br>
</div></blockquote></div>