A Shibboleth Identity Provider (IdP) is a piece of software managed by an institution. These are usually managed at the campus level, with someone from the library generally configuring access to Serials Solutions' services. Shibboleth IdPs release certain attributes after authentication. Common attributes include the affiliation, scoped affiliation, entitlements, and targeted Id (unique identifier for a user). Some content providers require the IdP to release certain attributes (usually affiliation/scoped affiliation or entitlement) to authorize a user.

No attributes are required for authorization for Serials Solutions' services. If no attributes are configured, the service allows access based on authentication alone. The library can optionally configure attribute/value pairs to further restrict access. Serials Solutions does not restrict to a particular scheme (for example, eduPerson).

Read more about Shibboleth (and Athens) Single Sign-On access control.

You can also read Serials Solutions' Participant Operational Practices (POP) document for Shibboleth.

• Date Created: 9-Feb-2014
• Last Edited Date: 20-Feb-2014
• Old Article Number: 7493