InC-Lib-Vendor

[David Kennedy <>]

Yagnesh,

Thank you for compiling this response
for us.  We really appreciate your helping us in this effort.

I have a follow up question based on
your response to some of our questions.  You mention that you accept
the eduPersonPrincipalName attribute.  Does the WilsonWeb interface
use this attribute in any way to integrate a Shibboleth-authenticated user
with a My WilsonWeb account?

Thanks
Dave

-----
David Kennedy
Systems Programmer
Perkins Library, Duke University
(919) 613-6831

"Shah, Yagnesh" <>

07/09/2009 01:32 PM

To	<>
cc	"David Kennedy" <>, "Miller, Ron" <>
Subject	[InC-Lib-Vendor] RE: HW Wilson and InCommon Library Services Collaboration

Attached is the information requested.
-----Original Message-----
From: David Kennedy [mailto:]
Sent: Thursday, July 09, 2009 9:43 AM
To: Shah, Yagnesh; Miller, Ron
Cc: 
Subject: HW Wilson and InCommon Library Services Collaboration


Yagnesh, Ron, 

I am writing you on behalf of the InCommon Library Services Collaboration.

We represent a group of research libraries who are working to expand the
use of Shibboleth among members of the InCommon federation. As part of
that effort, we are gathering information from vendors about how they have
implemented Shibboleth. By making this information more accessible, we
hope to make it easier for libraries to use the technology. We also would
like to help develop common practices among vendors that would simplify
the implementation process for everyone involved and make Shibboleth an
attractive option for users. 

We think that expanding the use of Shibboleth will help you in various
ways: 

   1. Provide a more secure means of access than IP authentication.
   2. Provide better tools for identifying who is responsible when
breaches occur. 
   3. Make it possible for users to take advantage of personalized
features on a site without requiring them to open a local account maintained
by the vendor. 
   4. Help to start moving away from IP-based authentication and the
overhead it requires. 

We ask that you answer the following questions, as they relate to your
products and services: 

   1. What are the minimum attributes you require from an Identity
Provider for basic Shibboleth authentication? 
   2. What additional services, if any, do you provide through Shibboleth
beyond basic login, for example, personalization. If you do provide additional
services, what is required to enable them? 
   3. Do you support "WAYFless" access, that is, access
that does not require a user to identify where they are from in order to
reach his or her local authentication system? 
   4. Do you support direct Shibboleth-authenticated links to resources?
   5. Who should libraries contact if they want to set up Shibboleth
access to your site or if they have questions or problems?

We appreciate your willingness to help us in this effort.

David Kennedy, Duke University 
Adam Chandler, Cornell University 
Andy Ingham, University of North Carolina, Chapel Hill
Jonathan Lavigne, Stanford University 
Kent Percival, University of Guelph 
Joy Veronneau, Cornell University 
Jason Zavar, OCLC 
Fred Zhang, Michigan State University 
Foster Zhang, Johns Hopkins University 

[please send response email to ]

-----
David Kennedy
Systems Programmer
Perkins Library, Duke University
(919) 613-6831
[attachment "H-W-Wilson-info-for-incommon-federation.doc"
deleted by David Kennedy/Libraries/Provost/Academic/Univ/Duke]