student_success_working_group:single_sign_on
Table of Contents
Single Sign-On Protocols
CAS
A branch for 2.4 that is specific to University of Windsor: http://git.evergreen-ils.org/?p=contrib/Conifer.git;a=commitdiff;h=88b1d68561e71c18d5d5098cb79ab0ddbaf61ff6
Libraries that have expressed interest:
- Linn-Benton Community College
Existing clients:
- There's a Perl client for CAS called AuthCAS
- There's also an Apache mod: https://wiki.jasig.org/display/CASC/mod_auth_cas
LDAP
Authentication with LDAP already exists.
- Here are some bugs: https://bugs.launchpad.net/evergreen/+bugs?field.tag=ldap
- As of December 2016, Mohawk College and Berklee College of Music both use the authentication proxy with LDAP
It does not do automatic provisioning of accounts, it just allows users to sign-in using their LDAP credentials if they already have an Evergreen account.
- Conifer uses a crazy Python script to provision accounts; it also generates a barcode for the user and updates the LDAP entry with the new barcode. This code might be a useful starting point for others who want to create their own, but a general utility is unlikely as LDAP attributes vary from organization to organization.
OpenAthens
SAML
- As of December 2016, Berklee College of music is interested in moving to SAML
There's a Perl library: https://metacpan.org/pod/Net::SAML
Shibboleth
student_success_working_group/single_sign_on.txt · Last modified: 2022/02/10 13:34 by 127.0.0.1