Adding institution support in SFX for Shibboleth SSO Michael Zach, Jan Krajíc, Jiří Pavlík Adding institution support in SFX for Shibboleth SSO Charles University in Prague Computer Science Centre
What is this about? SFX consortia shared instance off-campus access Shibboleth SSO eduID.cz (Czech academic identity federation) CESNET (Czech Education and Scientific NETwork)
Past presentations Jiri Pavlik: Shibboleth session at Ghent, 2010 a plan for setting up Shibboleth SSO - Charles University case study, Haifa 2011 set up description
Uniform Information Gateway (UIG) National portal of library network in Czech Republic (www.jib.cz) project of Czech National Library & Charles University in Prague (*2003) 30 registered libraries MetaLib Plus and MetaLib search engine & Primo Central Index 1 SFX instance, using institutes feature
UIG - SFX set up institutes library proxies (EZProxy) Czech National Library Identity Provider e-journals and e-books AZ for registered organisations Google Scholar registration
UIG - SFX institutes On / off-campus access no IP ranges activation targets for: DEFAULT & INSTITUTE & Authentication note availability info for everybody institutional AZ Lists institutional exports institutional Proxies institutional GS
UIG - SFX set up - example in SFX menu - problem with only one link into a target
The solution SFX is not supporting institutes feature for off-campus access our local solution → pull-down menu in SFX menu
The solution
Libraries Single Sign-On (by CESNET)
From inside Perl script (institutes.cgi) Perun - Identity and Access Management System perun.cesnet.cz cookie “sfx_institute” iframe in a template Affected templates ../templates/simplified_template1/sfxmenu.tmpl ../templates/simplified_template1/mobile/sfxmenu.tmpl
Future development Enhancement Request Assigning Identity providers to institutes as proxy more than one IdP per instance Including name of institute into Auth. note Future of UIG transformation UIG into new Central Portal of Libraries → Discovery system
Sharing implementation support into global SFX? Code Share
Michael Zach, michael.zach@ruk.cuni.cz “Thank you. Questions” Michael Zach, michael.zach@ruk.cuni.cz