What's in this article:
- How to set up SAML for your institution
- WAYFless URL Generator for ITHAKA-SP
- What information we need from you
- Using attributes to allocate resources
How to set up SAML for your institution:
If your institution is ready to get started using SAML, you will need the following from JSTOR:
Our SP entityID: https://shibbolethsp.jstor.org/shibboleth
JSTOR belongs to the SAML federations listed below. We automatically ingest Metadata provided by InCommon and EduGain. If your institution belongs to one of these federations, we require that you release your metadata through one of the two.
- eduGAIN (Federation Membership Organization) [metadata]
- InCommon (United States) [metadata]
- OpenAthens (Multiple Countries) [metadata]
- DFN-AAI (Germany) [metadata]
- Note: JSTOR no longer sources data directly from DFN, but instead through eduGAIN.
- Studentnet (Australia) [metadata]
Use the WAYFless URL Generator in the box below to create a WAYFless URL.
What we need from you:
Please send us your entityID to firstname.lastname@example.org.
To set up access, release of an attribute value in your metadata is required. There are different options here: eduPersonScopedAffiliation is preferred, but we also support eduPersonEntitlement.
If you wish to use eduPersonEntitlement, or if you wish to allocate resources as described below, please specify the attribute and values to our support team. Otherwise, we will require that users must have at least one eduPersonScopedAffiliation attribute, with any value.
Using metadata attributes to allocate resources:
If you want to allocate different JSTOR resources across different campuses, departments, or affiliated user groups (such as current students vs. alumni) you can use metadata attributes to do this in the following ways:
eduPersonEntitlement: present a URI that distinguishes the department from others at the school.
By Role (student vs. alum vs. staff, etc.)
eduPersonScopedAffiliation: present a URI that distinguishes between groups that need to receive different access.
Example: email@example.com and firstname.lastname@example.org
eduPersonScopedAffiliation: present a URI that distinguishes between campuses that need to receive different access.
Example: email@example.com and firstname.lastname@example.org
When you are ready to set us your SAML, email us your entityID and let us know if you need access provisioned across different groups, campuses, or departments.
Consult the following external resources to learn more:
Questions? Email us, chat with us by clicking the chat prompt below (during normal business hours only), or call us at 888-388-3574 or 734-887-7001.