Access Management: Shibboleth & OpenAthens In Depth

What's in this article:

• How to arrange SAML for your institution
• WAYFless URL Generator for ITHAKA-SP
• Using attributes to allocate resources

JSTOR is updating its Shibboleth/OpenAthens service provider and will migrate all participating institutions to this new framework by September 15, 2018.

For most institutions this will be a seamless transition and no work is required on your part.

If your institution utilizes WAYFless URL links, you will need to generate a new WAYFless URL and update any links on library and course websites. You can do this using the WAYFless URL generator below.

Below is what you will need to connect to JSTOR once you have Shibboleth up and running. Please don't hesitate to contact us if you have any questions. 

Our SP entityID: https://shibbolethsp.jstor.org/shibboleth

Membership: We belong to the federations below, but can work with many others via interfederation metadata (if in doubt, contact us):

• UKAMF (United Kingdom) [metadata]
• eduGAIN (Federation Membership Organization) [metadata]
• InCommon (United States) [metadata]
• OpenAthens (Multiple Countries) [metadata]
• DFN-AAI (Germany) [metadata]

Use the WAYFless URL Generator in the box below to create a WAYFless URL.

All we need from you in order to enable access is the entity ID for your institution. Please send your entity ID to support@jstor.org.

Using attributes to allocate resources:

Want to allocate different JSTOR resources across different campuses, departments, or affiliated groups (like current students vs. alumni)? Yes, you can do that!

• By Department
  • eduPersonEntitlement: present a URI that distinguishes the department from others at the school. Ex: science.wagstaff.edu
• By Role (student vs. alum vs. staff, etc.)
  • eduPersonScopedAffiliation: present a URI that distinguishes between groups that need to receive different access. Ex: student@wagstaff.edu and alum@wagstaff.edu 
• By Campus
  • eduPersonScopedAffiliation: present a URI that distinguishes between campuses that need to receive different access. Ex: student@westcampus.wagstaff.edu and alum@eastcampus.wagstaff.edu

When you’re ready to make the leap, email us your entityID and let us know if you need access provisioned across different groups, campuses, or departments.

Further Reading...

• Shibboleth

• OpenAthens

• SAML

• Attribute Usage Guide

Questions? Email us, chat with us by clicking the chat prompt below (during normal business hours only), or call us at 888-388-3574 or 734-887-7001.