Driver | Approver | Contributors | Stakeholder |
---|---|---|---|
Campus project managers | Marcus Mizushima | Campus Identity Management groups |
Objective | Set-up authentication between ScholarWorks and local campus Shibboleth (or other SAML-based) identity providers (IdP). |
Due date | |
Key outcomes | Campus identity management groups will configure their local IdP to authenticate with ScholarWorks. |
Status | IN PROGRESS |
Problem Statement
Campus users will need to authenticate in order to upload new submissions or access restricted / embargoed materials in ScholarWorks.
Scope
Must have:
- SP metadata published to InCommon.
All campuses + MLML (not just those uploading material to ScholarWorks) IdPs configured with release attributes for ScholarWorks.
Not in scope:
Non-SAML based systems such as CAS or LDAP
Milestones and deadlines
Milestone | Owner | Deadline | Status |
---|---|---|---|
SSL certificate | COMPLETED | ||
Set-up ScholarWorks Shibboleth SP | COMPLETED | ||
Configure campus identifier to Hyrax user group mapping. | COMPLETED | ||
Register ScholarWorks with InCommon | Marcus Mizushima | COMPLETED | |
Prep libraries on authentication task (email and webinar) | COMPLETED | ||
Provide documentation for configuring local IdP with release policy | COMPLETED | ||
Manual exchange of metadata with Okta users | David Walker | NOT STARTED | |
All campuses authenticating properly | David Walker | IN PROGRESS |
Authenticating properly
Campus | Authenticate | Attributes |
---|---|---|
Bakersfield | ||
Chancellor's Office | YES | YES |
Channel Islands | YES | YES |
Chico | YES | YES |
Dominguez Hills | YES | |
East Bay | ||
Fresno | YES | YES |
Fullerton | YES | YES |
Humboldt | ||
Long Beach | ||
Los Angeles | ||
Maritime | YES | YES |
Monterey Bay | ||
Moss Landing | YES | YES |
Northridge | YES | YES |
Pomona | YES | YES |
Sacramento | YES | YES |
San Bernardino | YES | YES |
San Diego | YES | |
San Francisco | YES | |
San Jose | ||
San Luis Obispo | ||
San Marcos | ||
Sonoma | YES | YES |
Stanislaus | YES | INCOMPLETE |