Single Sign-On Protocols

A branch for 2.4 that is specific to University of Windsor: http://git.evergreen-ils.org/?p=contrib/Conifer.git;a=commitdiff;h=88b1d68561e71c18d5d5098cb79ab0ddbaf61ff6

Libraries that have expressed interest:

• Emily Carr University of Art and Design
• Kirtland Community College
• Linn-Benton Community College

Existing clients:

• There's a Perl client for CAS called AuthCAS
• There's also an Apache mod: https://wiki.jasig.org/display/CASC/mod_auth_cas

Authentication with LDAP already exists.

• Documentation: http://docs.evergreen-ils.org/reorg/3.0/command_line_admin/_authentication_proxy.html
• Here are some bugs: https://bugs.launchpad.net/evergreen/+bugs?field.tag=ldap
• As of December 2016, Mohawk College and Berklee College of Music both use the authentication proxy with LDAP

It does not do automatic provisioning of accounts, it just allows users to sign-in using their LDAP credentials if they already have an Evergreen account.

• Conifer uses a crazy Python script to provision accounts; it also generates a barcode for the user and updates the LDAP entry with the new barcode. This code might be a useful starting point for others who want to create their own, but a general utility is unlikely as LDAP attributes vary from organization to organization.

• OpenAthens proposal
• Helpful email thread detailing scope of project

• As of December 2016, Berklee College of music is interested in moving to SAML

There's a Perl library: https://metacpan.org/pod/Net::SAML