inc-librsvcs - Cornell Library Shibboleth status
Subject: InCommon Library Services
List archive
- From: "Adam Chandler" <>
- To:
- Subject: Cornell Library Shibboleth status
- Date: Tue, 25 Mar 2008 10:57:19 -0400
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=message-id:date:from:sender:to:subject:mime-version:content-type:x-google-sender-auth; b=bnJZrJdU8EPs5LcEpyHXrOvZvHHZB9qjjD5mNqht4x6sqzBXUutkS0TJjijEWZ5t65Nuimtdryp/WC+Yt9JseMTPik3vcC5Ym8TjdqIV+zvw80SYCbtYiGQg7FfS+XWnrPzzlJtdMMXGWpQol+TQM3EXlzsuNlkgbxCdhVGk3Vs=
1. Shib-enabled electronic resources:
EBSCO
JSTOR
ELSEVIER Science Direct
OCLC FirstSearch
REFWORKS
Illiad
2. Proxy server/remote access software used:
answer: EZProxy
3. Link resolver software used:
answer: WebBridge (III)
4. Shib-enabled library services enabled:
A. Is this pilot configuration being used by patrons (in a production or real-world beta capacity)?
answer: Our Illiad application is the only Shib enabled service we are currently offering in production.
B. What are your main unresolved issues with this configuration?
answer: Illiad works great.
C. What additional Shibboleth functionality could make this better?
D. What supplementary solutions could make this better?
answer: The key supplementary solution that I am interested in, which I have advocated for in our calls, is clearer user-centered integration of Shbboleth logons in the content providers' public web interfaces, i.e., when a patron does a google search for a well known library resource like proquest, they should be easily funneled to the shibboleth login. To me, this is as valuable as integration with ezproxy.
E. If you are using a different configuration for production, what are the outstanding issues with your current production system and do you think that shibboleth and the hybrid environment solution(s) proposed so far could resolve these issues?
answer: We don't yet see that the benefits of implementing the hybrid ezproxy/shibboleth environment outweigh the opportunity costs we would incur in making the transition.
F. Other comments/questions
answer: One of the great features of Shibbleth is that it allows us to use campus single sign on with services that are hosted outside the boundaries of our campus. When we attempted to integrate kerberos with our hosted Illiad ILL service, we ran into a policy problem: we are only allowed to install the kerberos software on machines hosted on the Cornell domain. Shibboleth enabled us to create a seamless logon experience on a service hosted by a third party. With the rise of cloud computing options this will become more and more valuable.
- Cornell Library Shibboleth status, Adam Chandler, 03/25/2008
Archive powered by MHonArc 2.6.16.