The University of Leeds chose to implement OpenAthens single sign-on for online library resources to replace its aging SHIBBOLETH system. OpenAthens offers a cloud-based SAML authentication service that is interoperable with existing technologies and provides centralized reporting on resource usage. The implementation will occur in two phases - replacing the on-campus SHIBBOLETH with OpenAthens, then updating off-campus access points. This will create a unified single sign-on system across the university, replacing the three previous user experiences.

1. Implications for online library resource
access following the introduction of single
sign-on to the University of Leeds
Trevor Hough
University of Leeds

2. Why the University of Leeds chose OpenAthens, or, what needed to
be better than the old system
• Our on premise SHIBBOLETH service was running on end of life hardware.
• We had three different user experiences for accessing electronic resources
depending upon what resource it is and where the user is located.
• WAM proxy is a proprietary technology and it is tied to our current Library
Management System.
• We had limited management information on usage for electronic resources

3. OpenAthens service provided by EduServ offers:
• SAML based authentication service that is interoperable with SHIBBOLETH and CAS for
application and electronic resource access.
Advantages:
• Supports ADFS authentication.
• Provides cloud based Infrastructure as a Service at a low cost for FE/HE sectors in their
secure UK ISO27001 data centre with 24/7/365 monitoring and support.
• Offers granular reporting to support management information that can be used to inform
resource provision.
Disadvantages:
• Requires further LURCIS and Active Directory integration

4. Implementation Phases
• Phase One:
Replace on campus SHIBBOLETH service with cloud based OpenAthens
authentication service.
• Phase Two:
Update the WAM authenticated resources to authenticate against OpenAthens
Update links in Summon to use OpenAthens

5. SHIBBOLETH
User
SHIBBOLETH
Login
Lexis
Nexis
Active Directory
Targeted ID
Entity ID
https://passport01.leeds.ac.uk/idp/shibboleth
Username + SALT
Lexis
Nexis
UK Federation
Username
Entity ID
SHIBBOLETH
Server
Refreshed
72 Hour / 14 Day
Refreshed
Daily / 4 Hourly

7. OpenAthens
User ADFS Login
Active Directory
ADFS
Lexis
Nexis
UK Federation
@leeds.ac.uk
Entity ID
Username
Username
Lexis
Nexis
Targeted ID
Entity ID
https://passport01.leeds.ac.uk/idp/shibboleth
Username + SALT
OpenAthens
Service
Refreshed
Daily

9. Off Campus
On Campus (IP Address) WAM
Direct Access
User
Proquest
User
WAM Login

10. Benefits to Leeds from moving to OpenAthens
• Single Sign On
–Students log on to the Portal and are authenticated for online resources
• Integration across the University
–Student’s Union uses OpenAthens for account access
–Britsafe online training courses
• Reporting access to online resources
–Easier to tell which resources are being accessed

11. Any questions?
Library and resource access questions:
Trevor Hough: t.j.hough@leeds.ac.uk
SSO project questions:
Adam Watson: adam.watson@york.ac.uk