Shibboleth and Off-Campus Access
(7/8/05)
The OSU Libraries will implement Shibboleth, starting June 2004, as part of the Libraries’ off-campus access process.
- Users will enter their Name.Number and password on our off-campus sign-in form.
- Shibboleth works behind the scene as part of the authentication process.
- Users should notice no change in the sign-in process.
What is Shibboleth?
- Internet2 project for distributed authentication and authorization application, co-developed by OSU OIT staff.
- Authentication is verifying that a person is who he says he is.
- Authorization is giving that person access to the resources he is entitled to based upon who he is.
OSU Libraries’ Implementation
Phase 1: Done July 2004
Off-campus access
- Shibboleth will be used in the authentication process.
- No change from the current off-campus access via EZProxy for Columbus or Regional campuses OSU users.
- Regional tech colleges’ users have off-campus access via OhioLINK authentication for resources provided by OhioLINK.
On-campus
- Users have access to all resources licensed for their campus at computers in campus libraries, offices, computers labs, dorms, etc on the Columbus and Regional campuses.
- Users at campus computers do not have to sign-in via Shibboleth.
Phase 2: This phase will not be implemented. (7/8/05)
Off-campus access
- Columbus OSU users have access to all resources purchased for the Columbus campus.
- Regional campuses’ OSU users have off-campus access to resources purchased by OSU Libraries or OhioLINK.
- Regional tech colleges’ users have off-campus access via OhioLINK authentication for resources provided by OhioLINK.
On-campus access
- Users have access at computers in campus libraries, offices, computers labs, dorms etc. on the Columbus and Regional campuses to those resources licensed for each specific campus.
- On the Columbus campus users at library computers do not have to sign-in via Shibboleth.
- At some time in the future users in the Columbus campus libraries may be required to sign-in so the Libraries is in compliance with OIT’s Internet access policy. This is different from requiring users to sign-in via Shibboleth. OIT guest accounts will be created for non-OSU users and have an assigned expiration date.
Phase 3: no implementation date
- Database and e-journal vendors implement Shibboleth on their sites. There is no timetable when vendors will begin to do this, and some vendors may never implement Shibboleth.