Upgrade Notes v6.6.2 - SAML upgrade notes and username mappings

Dear EZproxy Community,

When we released EZproxy 6.6.2, several of you expressed concerns about the upgrade impacting access to your SAML identity providers (IdPs). After extensive testing, we have not found any bugs in the EZproxy 6.6.2 that will prevent EZproxy from working with SAML IdPs. However, there are three important criteria that SAML users should double check when upgrading to EZproxy 6.6.2 which are now also reflected in the release notes.


  *   SAML users should confirm whether their IdP's Response documents are signed and/or encrypted when configuring their Active Directory/LDAP integration.
  *   Confirm whether usernames are mapping correctly from your SAML IdP into EZproxy.
  *   Libraries who have configured their shibuser.txt file to make authorization decisions will need to put quotes around the URN parameter in the If Any(auth:"URN/URL"; "employee").

Please review our EZproxy 6.2.2 release notes for more information about these recommendations. Link to 6.6.2 release notes<https://help.oclc.org/Library_Management/EZproxy/EZproxy_release_notes_and_known_issues/2019_release_notes/050EZproxy_v6_6_2_release_notes>.

As always, please reach out to OCLC Support<mailto:[email protected]> for more information during your upgrade process. 

Best,
Craig

--
Craig Boman
OCLC · Product Analyst, Global Product Management
6565 Kilgour Place, Dublin, Ohio USA 43017
[/var/folders/_w/v6pgx7hn499bhnh9qf8d2mgdblctsz/T/com.microsoft.Outlook/Content.MSO/D696AF3E.tmp]<http://www.oclc.org/home.en.html?cmpid=emailsig_logo>
OCLC.org<http://www.oclc.org/home.en.html?cmpid=emailsig_link> · Blog<http://www.oclc.org/blog/main/?cmpid=emailsig_blog> · Facebook<http://www.facebook.com/pages/OCLC/20530435726> · Twitter<http://twitter.com/oclc> · YouTube<http://www.youtube.com/OCLCvideo>






********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].