Differences

This shows you the differences between two versions of the page.

--- student_success_working_group:single_sign_on [2018/02/19 17:15] – [LDAP] sandbergja
+++ student_success_working_group:single_sign_on [2022/02/10 13:34] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
-====== Specific protocols ======
+====== Single Sign-On Protocols ======
 ===== CAS =====
 A branch for 2.4 that is specific to University of Windsor: http://git.evergreen-ils.org/?p=contrib/Conifer.git;a=commitdiff;h=88b1d68561e71c18d5d5098cb79ab0ddbaf61ff6
+Libraries that have expressed interest:
+  * [[http://markmail.org/message/2dnj7cakwks53buk|Emily Carr University of Art and Design]]
+  * [[http://georgialibraries.markmail.org/thread/inalcs3tkxhp2olq|Kirtland Community College]]
+  * Linn-Benton Community College
+Existing clients:
+  * There's a Perl client for CAS called [[https://metacpan.org/pod/AuthCAS|AuthCAS]]
+  * There's also an Apache mod: https://wiki.jasig.org/display/CASC/mod_auth_cas
 ===== LDAP =====
-  * Single Sign-On with LDAP already exists.  Here are some bugs: https://bugs.launchpad.net/evergreen/+bugs?field.tag=ldap
+Authentication with LDAP already exists.
+  * Documentation: http://docs.evergreen-ils.org/reorg/3.0/command_line_admin/_authentication_proxy.html
+  * Here are some bugs: https://bugs.launchpad.net/evergreen/+bugs?field.tag=ldap
   * As of December 2016, [[http://markmail.org/message/bfiad3ficvy6erox|Mohawk College]] and [[http://markmail.org/message/eqaty3kj2omkbuc6|Berklee College of Music]] both use the authentication proxy with LDAP
-===== OpenAthens =====
+It does not do automatic provisioning of accounts, it just allows users to sign-in using their LDAP credentials if they already have an Evergreen account.
+  * Conifer uses a [[http://git.evergreen-ils.org/?p=contrib/Conifer.git;a=blob;f=tools/patron-load/ldap_osrf_sync;h=c91500a8eac055afedf1e30541923df2000a960b;hb=refs/heads/tools_current|crazy Python script]] to provision accounts; it also generates a barcode for the user and updates the LDAP entry with the new barcode. This code might be a useful starting point for others who want to create their own, but a general utility is unlikely as LDAP attributes vary from organization to organization.
-There is possibly some development going on (perhaps with PINES?)
+===== OpenAthens =====
+  * [[dev:proposal:openathens_integration|OpenAthens proposal]]
+  * [[https://georgialibraries.markmail.org/thread/u33y7kkp4vxye7nf|Helpful email thread detailing scope of project]]
 ===== SAML =====
   * As of December 2016, Berklee College of music is [[http://markmail.org/message/eqaty3kj2omkbuc6|interested in moving to SAML]]
+There's a Perl library: https://metacpan.org/pod/Net::SAML
 ===== Shibboleth =====