Authentication
Reference materials
Project outline
| Driver | Approver | Contributors | Stakeholder |
|---|---|---|---|
| Campus project managers | Marcus Mizushima | Campus Identity Management groups |
| Objective | Set-up authentication between ScholarWorks and local campus Shibboleth (or other SAML-based) identity providers (IdP). |
| Due date | |
| Key outcomes | Campus identity management groups will configure their local IdP to authenticate with ScholarWorks. |
| Status | COMPLETED |
Problem Statement
Campus users will need to authenticate in order to upload new submissions or access restricted / embargoed materials in ScholarWorks.
Scope
Must have:
- SP metadata published to InCommon.
All campuses + MLML (not just those uploading material to ScholarWorks) IdPs configured with release attributes for ScholarWorks.
Not in scope:
Non-SAML based systems such as CAS or LDAP
Milestones and deadlines
| Milestone | Owner | Deadline | Status |
|---|---|---|---|
| SSL certificate | COMPLETED | ||
| Set-up ScholarWorks Shibboleth SP | COMPLETED | ||
| Configure campus identifier to Hyrax user group mapping. | COMPLETED | ||
| Register ScholarWorks with InCommon | Marcus Mizushima | COMPLETED | |
| Prep libraries on authentication task (email and webinar) | COMPLETED | ||
| Provide documentation for configuring local IdP with release policy | COMPLETED | ||
| Manual exchange of metadata with Okta users | David Walker | COMPLETED | |
| All campuses authenticating properly | David Walker | COMPLETED |