<div dir="ltr"><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000">Hi Laura, </div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000">Correct that is not our experience. I can be on-campus (or VPN) and look at articles and then click "sign in" to sign in to my EBSCO account, which will send me to SSO authentication. </div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000"><br></div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000">SEe this article in the EBSCOConnect <a href="https://connect.ebsco.com/s/article/How-do-I-set-up-preferred-authentication">https://connect.ebsco.com/s/article/How-do-I-set-up-preferred-authentication</a></div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000">Kara</div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000"><br></div><div class="gmail_default" style="font-family:arial,sans-serif;font-size:small;color:#000000"><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><p class="MsoNormal">~~~~~ <span style="font-family:arial;color:rgb(39,78,19)">Kara S. Hart </span></p></div><div><div style="font-family:arial"><font size="2" color="#274e13">Systems Librarian - Library & Technology Services <div style="font-family:arial,helvetica,sans-serif;display:inline">- </div>Wellesley College</font></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 16, 2024 at 1:00 PM Electronic Resources in Libraries discussion list via Eril-l <<a href="mailto:eril-l@lists.eril-l.org">eril-l@lists.eril-l.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-6164658166720010077">
<div lang="EN-US" style="overflow-wrap: break-word;">
<div class="m_-6164658166720010077WordSection1">
<p class="MsoNormal">Hi Kara<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">This is where I am confused. I was led to believe that if a user authenticated via IP, that the SSO cannot kick in for their account sign in as SSO only works at the point of entry. So, it sounds like that is not your experience. Could
you confirm?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">For those that do IP, SSO authtype, did you make that decision so the user experience basically remained the same – meaning, no need to login to just view an article or book chapter?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Laura Vogler<u></u><u></u></p>
<p class="MsoNormal">Associate Library Director<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="color:rgb(192,0,0)"><a href="https://library.wabash.edu/" target="_blank"><span style="color:rgb(192,0,0)">Wabash College Lilly Library</span></a> | 301 W Wabash Ave | Crawfordsville IN 47933 | P: 765.361.6215<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0in 0in">
<p class="MsoNormal"><b>From:</b> Eril-l <<a href="mailto:eril-l-bounces@lists.eril-l.org" target="_blank">eril-l-bounces@lists.eril-l.org</a>> <b>On Behalf Of
</b>Electronic Resources in Libraries discussion list via Eril-l<br>
<b>Sent:</b> Tuesday, July 16, 2024 9:25 AM<br>
<b>To:</b> Electronic Resources in Libraries discussion list <<a href="mailto:eril-l@lists.eril-l.org" target="_blank">eril-l@lists.eril-l.org</a>><br>
<b>Subject:</b> Re: [Eril-l] Question about EBSCO and SSO authentication<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif;color:black">Hi Laura,<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif;color:black">Once you set up SSO, you don't want to mix and match with EZProxy (if this is what you meant by proxy). Part of the URL for linking to EBSCOhost contains directions
"&authtype=ip,sso" that will dictate how EBSCO looks to authenticate. There are a bunch of different choices based on your available options and the order is how it works through them. You can only have 2. We use ip,sso, it will look at the user's IP first
and if in range it will not prompt the user for authentication to search and will NOT link them to their EBSCO account. If out of range (off-campus) then it will fail IP and will move to SSO and prompt for authentication. <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif;color:black">If unauthenticated within the IP range, if the user wants to login to their EBSCO account they click sign in and it will prompt for the SSO login.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif;color:black">If you were to use EZproxy, if you add the proxy prefix to the URL and go through EZproxy, your users will get an error message when trying to login to their EBSCO
account, because it's essentially double authenticating and our (DUO) SSO throws errors. <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12pt;font-family:Arial,sans-serif;color:black"><u></u> <u></u></span></p>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">~~~~~ <span style="font-family:Arial,sans-serif;color:rgb(39,78,19)">Kara S. Hart </span><u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(39,78,19)">Systems Librarian - Library & Technology Services <u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(39,78,19)">- <u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:rgb(39,78,19)">Wellesley College</span><span style="font-family:Arial,sans-serif"><u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Tue, Jul 16, 2024 at 8:49 AM Electronic Resources in Libraries discussion list via Eril-l <<a href="mailto:eril-l@lists.eril-l.org" target="_blank">eril-l@lists.eril-l.org</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<p class="MsoNormal">Hello<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">We are in the process of setting up SSO authentication for our EBSCO databases. If you have done this, I have a couple of questions.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Current Situation (without SSO): A patron accesses a database via IP or proxy authentication. Once in EBSCO, patrons can view articles and book chapters without further having
to authenticate. However, if they want to save a search, create an alert or download a whole eBook, they have to create an EBSCO account and sign in.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Our hope was that with SSO, the only change in this scenario would be the patron logs in with their campus credentials.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">We are being told that if a patron accesses via IP or proxy, they will not be able to use their campus credentials for their EBSCO account. From what I understand, the SSO authentication
would have to happen at the point they enter an EBSCO and at that point they are already logged into their EBSCO account. Is this your experience on your campus? This seems to create an extra layer of friction in that the majority of our users do not utilize
a personal account on EBSCO. Most are just viewing articles or book chapters.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">I would appreciate hearing how SSO access works on your campus.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Thank you,<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Laura Vogler<u></u><u></u></p>
<p class="MsoNormal">Associate Library Director<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(192,0,0)"><a href="https://library.wabash.edu/" target="_blank"><span style="color:rgb(192,0,0)">Wabash College Lilly Library</span></a> | 301 W Wabash Ave | Crawfordsville
IN 47933 | P: 765.361.6215</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Eril-l mailing list<br>
<a href="mailto:Eril-l@lists.eril-l.org" target="_blank">Eril-l@lists.eril-l.org</a><br>
<a href="http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org" target="_blank">http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org</a><u></u><u></u></p>
</div>
</blockquote>
</div>
</div>
</div>
_______________________________________________<br>
Eril-l mailing list<br>
<a href="mailto:Eril-l@lists.eril-l.org" target="_blank">Eril-l@lists.eril-l.org</a><br>
<a href="http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org" rel="noreferrer" target="_blank">http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org</a><br>
</div></blockquote></div>