Page Comparison

Information needed from each campus

Ex Libris would like two things from each campus:

1. The ‘release attribute’ (read: field in the user data) that will serve as the ‘match point’ between Shibboleth and Primo/Alma.
2. A set of test credentials so they can assist with testing.

 You can send the test credentials to David.

 Release Attribute

We recommend surveying the options below and consulting with your campus identity management contact before making a decision.  If you are unsure who that is at your campus, check the contacts at the bottom of this page. 

1. PeopleSoft ID

With this option, only users with an existing entry in PeopleSoft can login to Primo via Shibboleth. 

Any library user who does not have an existing entry in PeopleSoft (e.g., community borrowers, potentially some auxiliary users) will need to be added to Alma as an 'internal' user, and will login to Primo using the 'internal' login instead of via Shibboleth.

If you want to proceed with this option, your campus Shibboleth administrator can follow the directions here and you can begin testing immediately.

2. Campus username

With this option, any user with a campus username can login to Primo via Shibboleth.

Any other library user who does not have a campus username (e.g., community borrowers) will need to be added to Alma as an 'internal' user, and will login to Primo using the 'internal' login instead of via Shibboleth.

This option potentially covers a slightly larger pool of users than the option above, but will require extra work, and so comes with two significant caveats.  Read these carefully.

1. This option could be useful if your campus has a fairly sizeable number of affiliated people outside of PeopleSoft who are loaded into both Alma and Shibboleth.  If these users are not loaded into both systems, you gain nothing by choosing this option.
2. To ensure that this option works, every user in Alma must have a campus username.  And therefore the automated patron data load will also need to include a username for each user.  The centrally-developed patron data load process is getting its data from PeopleSoft.  So, if you want to use this authentication option and also rely on the centrally-developed patron load process, you will need to ensure that your campus stores usernames in PeopleSoft.  If they do not, you’ll need to work with your campus on a local patron data load process.

Users who are not in PeopleSoft but have a campus username can be added to Alma either manually or through a separate automated process.  Either way, they can still login to Primo via Shibboleth.

If you want to proceed with this option, please let us know which Shibboleth attribute will be the match point (your Shibboleth administrator should know this).  We’ll need to inform Ex Libris of this decision so they can make a change on their end.  And then your Shibboleth administrator can follow the directions here and you can begin testing.

Major Milestones

Documentation

• Guide for CSU Identity Providers
• Presentation to CSU Identity management staff
• Authentication Using SAML from Ex Libris

Meeting Notes:

• SSO / PeopleSoft Discussion (w/CO)
• 2015-11-04 Meeting notes