Re: Shibboleth/EZproxy setup with multiple groups

Hi,

We use a general SAML authentication, not Shibboleth, in EZProxy. Different user groups (Faculty, students, alumni, etc) have access to respective databases. The feature is configured in the shibuser.txt document. Access is granted based on the value of an attribute in the user’s SAML record.

Cheers,
Wei

Wei XUAN MLIS. Ph.D
Head, Libraries Systems
UNIVERSITY OF MANITOBA
Ph.    204-474-6710
Email: [email protected]
[signature_987253388]



From: EZproxy List <[email protected]> on behalf of "Scofield, Ian" <[email protected]>
Date: Thursday, October 17, 2019 at 11:56 AM
To: "[email protected]" <[email protected]>
Subject: Re: [EZPROXY-L] Shibboleth/EZproxy setup with multiple groups

We use Shibboleth and EzProxy to provide access. Our Identity Management group recently implemented Grouper, and we are thinking this may provide what we need to configure our access by groups.  We too are interested in learning how to configure these systems so we can identify specific user groups to better customize their access.

-Ian


Ian Scofield
Serials Acquisitions - E-Resources
Oregon State University Libraries & Press
Resource Acquisitions and Sharing
(541) 737-6953
121 The Valley Library
Corvallis, OR 97331-4501
[email protected]<mailto:[email protected]>
[email protected]<mailto:[email protected]>



From: EZproxy List <[email protected]> On Behalf Of Mark Kluzek
Sent: Thursday, October 17, 2019 8:26 AM
To: [email protected]
Subject: [EZPROXY-L] Shibboleth/EZproxy setup with multiple groups

Hi All,

We are looking at reconfiguring EZproxy to set up a range of groups with access to specific resources for each group.  Currently we have it set up to either allow or deny access to all the resources in the config.txt file.

We are using Shibboleth to authenticate. I can see in shibuser.txt that whatever Shibboleth attribute that is released can be mapped to a specific group.

If there has anyone out there who has a Shibboleth/EZproxy setup that allocates specific ‘group’ access to different user types it would be great to discuss this with you.

Please let me know if you do!

Best,
Mark Kluzek

Systems Analyst – Business Systems Operations
Information Systems & Support
University of Westminster
115 New Cavendish Street
London W1W 6UW

Phone 020 3506 7168
Email [email protected]<mailto:[email protected]>


The University of Westminster is a charity and a company limited by guarantee. Registration number: 977818 England. Registered Office: 309 Regent Street, London W1B 2HW.

This message and its attachments are private and confidential. If you have received this message in error, please notify the sender and remove it and its attachments from your system.

________________________________

To unsubscribe from the EZPROXY-L list, click the following link:
http://listserv.oclclists.org/scripts/wa.exe?SUBED1=EZPROXY-L&A=1

________________________________

To unsubscribe from the EZPROXY-L list, click the following link:
http://listserv.oclclists.org/scripts/wa.exe?SUBED1=EZPROXY-L&A=1

********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].