InCommon Library Services

["Paul B. Hill" <>]

> EZproxy, as a Shibboleth service provider, can consume user attributes 
> that are supplied by the identity provider.  And it can use those user 
> attributes to assign users (or user sessions) to ezproxy "Groups".  

In our case the authorization management cannot be determined directly 
via the attributes released by the identity provider. As I understand 
the current MIT EZproxy deployment, once the authentication has been 
done Rich's system calls a SOAP web service to retrieve the 
authorization information for the user.

Paul Hill
MIT Information Services and Technology