Tuesday 15 July 2008

Are you fully "Shibbolised"?

From 1 August 2008, access to Digimap will be via the UK federation only. If your institution has not made appropriate provision for this change, users at your institution will not be able to gain access to any Digimap Collection.

While there is a considerable volume of documentation about the transition between Athens and Shibboleth, there are one or two points relating to Digimap which may have been overlooked and which we would like to draw to your attention.

User Accountability
Regardless of which method your institution is employing to access Digimap, it will need to assert user accountability. Broadly speaking, this means that the institution must able to trace activity in any given session to an individual. User identifiers must not be reused or recycled according to a specific policy, and access to resources must be withdrawn in a timely fashion, when appropriate. You can read more about asserting user accountability in the UK federation's Rules of Membership (section 6, here: http://www.ukfederation.org.uk/library/uploads/Documents/rules-of-membership.pdf

and on the UK federation website, point 9, here: http://www.ukfederation.org.uk/content/Documents/AttributeUsageNotes.


If your institution is not asserting user accountability, all users will be denied access to all Digimap Collections, except Historic Digimap.

Open Athens
If your institution is using OpenAthens, it will be necessary to have a virtual Identity Provider with Eduserv in order for your institution to be able to assert user accountability. Accessing Digimap using the "Eduserv Athens" option in the WAYF will not give your users access to Digimap, since it is not possible to assert user accountability by this method.

Error Messages
If your institution does not yet assert user accountability, you will see a message to this effect when you try to log in to Digimap. If you see this message, please contact someone in your institution who deals with your UK federation implementation. EDINA cannot change this for you.

Using a local Identity Provider
If your institution is running its own Identity Provider, you may find the list of technical requirements on the EDINA website useful. If you are having trouble accessing Digimap while testing your Shibboleth implementation, please check that your Identity Provider is releasing the appropriate attributes, as given in the above list.

No UK federation?
If your institution has not registered with the UK federation, does not have an in-house Identity Provider or has not registered with OpenAthens, action is required as soon as possible. Setting up access to online resources via the UK federation is not an instant process.

EDINA has identified from publicly available lists, that there are some institutions subscribing to Digimap which appear not to be registered either with the UK federation or with OpenAthens. Users at these institutions will not be able to access Digimap at all from 1 August 2008.

If your institution is unable to set up access to online resources via the UK federation by 1 August, please contact the EDINA Helpdesk, where we will refer you to JISC Collections. You can telephone us on 0131 650 3302 or contact us by email: edina@ed.ac.uk

No comments: