Revolutionizing Consortium Access with Athens Single Sign-on A case study… Shannon Sweeny Robin Sewell

Arizona

AZHIN Membership 4 Universities 6 Muliti-site hospitals 7 Regional Health Centers 4 State/County Health Institutions 4 VA/Military hospitals 7 Small Telemedicine Clinics 1 National Association Arizona Health Information Network

Arizona Health Information Network Pre-Athens Access Methods Local IP-based authentication if possible Problem Non-authorised access of AZHIN resources unavoidable Password system for off-site access and non-IP organizations Problems Difficult for users to remember passwords Password management difficult Shared passwords Difficultly expiring passwords System often document-based rather than database driven

Pre-Athens Access Methods

Local IP-based authentication if possible

Problem

Non-authorised access of AZHIN resources unavoidable

Password system for off-site access and non-IP organizations

Problems

Difficult for users to remember passwords

Password management difficult

Shared passwords

Difficultly expiring passwords

System often document-based rather than database driven

Arizona Health Information Network Access Requirements Access to ALL resources AZHIN Resources and individual organizational subscriptions Single off-site password access to all resources Password access that allows user customization of passwords Method of managing and expiring user accounts Statistical tools to monitor use

Access Requirements

Access to ALL resources

AZHIN Resources and individual organizational subscriptions

Single off-site password access to all resources

Password access that allows user customization of passwords

Method of managing and expiring user accounts

Statistical tools to monitor use

Arizona Health Information Network Alternatives Custom-built, locally implemented solutions. Shibboleth SAML Athens

Alternatives

Custom-built, locally implemented solutions.

Shibboleth

SAML

Athens

Athens At the simplest level, Classic Athens is a managed directory of usernames with librarian focussed tools to manage them. Over 300 premium content vendors of subscription material on the web recognise Athens usernames to allocate rights to their material using the Athens authentication system.

Athens Athens Features Administrator management of user accounts Separate admin accounts for each AZHIN member organization User customizable passwords Expiration dates On demand expiration of accounts Account creation through bulk uploads or on individual basis Vendor interaction required to provide access via Athens Permission sets control user access Customizable user groups and statistics gathering

Athens Other benefits Single sign-on Library 2.0. Access to state-purchased resources and local institution-purchased resources MyAthens Individualised usage figures.

Athens How it works 1) User logs into Athens Cookie is set with values identifying the user and the user’s organization 2) User clicks on URL Vendor sees Athens cookie and confirms access eligibility with Athens 3) User gets into resource

How it works

1) User logs into Athens

Cookie is set with values identifying the user and the user’s organization

2) User clicks on URL

Vendor sees Athens cookie and confirms access eligibility with Athens

3) User gets into resource

Athens How it works Log into Athens User’s Info Reads cookie Verifies Info Confirms credentials Access Granted User views resource Clicks on resource URL

AZHIN & Athens What happened? Paul Bracke and Cheaney Seth Lyn Norris and a trial MLA conference 2006 The Krafty Librarian An impromptu meeting...

What happened?

Paul Bracke and Cheaney Seth

Lyn Norris and a trial

MLA conference 2006

The Krafty Librarian

An impromptu meeting...

AZHIN & Athens How it was implemented Standard Athens Access MyAthens login and resource access Resources displayed by vendor not by title Descriptions are customizable Athens toolbar My Athens

AZHIN & Athens How it was implemented AZHIN Customized Access Customizable AZHIN portal pages AZHIN member organizations can add their own logos and content Separate purchases displayed or accessed through the portal page Login box refers back to the page of origin for access to resources Access to journals and textbooks by title and subject

AZHIN & Athens

AZHIN & Athens Complications 1) Vendor URL variations NEJM IP access URL http://content.nejm.org NEJM Athens access URL http://auth.athensams.net/?ath_dspid=MMS&ath_returl=http %3A%2F%2Fcontent.nejm.org Commercial Title listing services require additional work on URLs as a result. 2) Displaying passwords sometimes required.

AZHIN & Athens Achievements Access to ALL resources Access to AZHIN Resources and individual organizational subscriptions Single off-site password access to all resources Password access that allows user customization of passwords Method of managing and expiring user accounts Statistical tools to monitor use

AZHIN & Athens AZHIN Home page AZHIN Self registration page MyAthens login Athens Home page ssweeny @ ebsco .com