150 likes | 279 Views
Adding institution support in SFX for Shibboleth SSO. Michael Zach, Jan Krajíc, Jiří Pavlík. Charles University in Prague Computer Science Centre. What is this about?. SFX consortia shared instance off-campus access Shibboleth SSO eduID.cz (Czech academic identity federation)
E N D
Adding institution support in SFX for Shibboleth SSO Michael Zach, Jan Krajíc, Jiří Pavlík Charles University in Prague Computer Science Centre
What is this about? • SFX • consortia • shared instance • off-campus access • Shibboleth SSO • eduID.cz (Czech academic identity federation) • CESNET (Czech Education and Scientific NETwork)
Past presentations • Jiri Pavlik: • Shibboleth session at Ghent, 2010 • a plan for setting up • Shibboleth SSO - Charles University case study, Haifa 2011 • set up description
Uniform Information Gateway (UIG) • National portal of library network in Czech Republic (www.jib.cz) • project of Czech National Library & Charles University in Prague (*2003) • 30 registered libraries • MetaLib Plus and MetaLib search engine & Primo Central Index • 1 SFX instance, using institutes feature
UIG - SFX set up • institutes • library proxies (EZProxy) • Czech National Library Identity Provider • e-journals and e-books AZ for registered organisations • Google Scholar registration
UIG - SFX institutes • On / off-campus access • no IP ranges • activation targets for: • DEFAULT & INSTITUTE • & Authentication note availability info for everybody institutional AZ Lists institutional exports institutional Proxies institutional GS
The solution • SFX is not supporting institutes feature for off-campus access • our local solution → pull-down menu in SFX menu
Libraries Single Sign-On (by CESNET)
From inside • Perl script (institutes.cgi) • Perun - Identity and Access Management System • perun.cesnet.cz • cookie “sfx_institute” • iframe in a template Affected templates ../templates/simplified_template1/sfxmenu.tmpl ../templates/simplified_template1/mobile/sfxmenu.tmpl
Future development • Enhancement Request • Assigning Identity providers to institutes as proxy • more than one IdP per instance • Including name of institute into Auth. note • Future of UIG • transformation UIG into new Central Portal of Libraries → Discovery system
Sharing • implementation support into global SFX? • Code Share
“Thank you. Questions” Michael Zach, michael.zach@ruk.cuni.cz