1. Adding institution support in SFX for Shibboleth SSO
Michael Zach, Jan Krajíc, Jiří Pavlík
Adding institution support in SFX for Shibboleth SSO
Charles University in Prague
Computer Science Centre

2. What is this about? SFX consortia shared instance off-campus access
Shibboleth SSO
eduID.cz (Czech academic identity federation)
CESNET (Czech Education and Scientific NETwork)

3. Past presentations Jiri Pavlik: Shibboleth session at Ghent, 2010
a plan for setting up
Shibboleth SSO - Charles University case study, Haifa 2011
set up description

4. Uniform Information Gateway (UIG)
National portal of library network in Czech Republic (
project of Czech National Library & Charles University in Prague (*2003)
30 registered libraries
MetaLib Plus and MetaLib search engine & Primo Central Index
1 SFX instance, using institutes feature

5. UIG - SFX set up institutes library proxies (EZProxy)
Czech National Library Identity Provider
e-journals and e-books AZ for registered organisations
Google Scholar registration

6. UIG - SFX institutes On / off-campus access no IP ranges
activation targets for:
DEFAULT & INSTITUTE
& Authentication note
availability info for everybody
institutional AZ Lists
institutional exports
institutional Proxies
institutional GS

7. UIG - SFX set up - example in SFX menu
- problem with only one link into a target

8. The solution
SFX is not supporting institutes feature for off-campus access
our local solution → pull-down menu in SFX menu

9. The solution

11. Libraries
Single Sign-On
(by CESNET)

12. From inside Perl script (institutes.cgi)
Perun - Identity and Access Management System
perun.cesnet.cz
cookie “sfx_institute”
iframe in a template
Affected templates
../templates/simplified_template1/sfxmenu.tmpl
../templates/simplified_template1/mobile/sfxmenu.tmpl

13. Future development Enhancement Request
Assigning Identity providers to institutes as proxy
more than one IdP per instance
Including name of institute into Auth. note
Future of UIG
transformation UIG into new Central Portal of Libraries
→ Discovery system

14. Sharing
implementation support into global SFX?
Code Share

15. Michael Zach, michael.zach@ruk.cuni.cz
“Thank you. Questions”
Michael Zach,