The document discusses identity management in education. It describes tools from JISC Collections like UK Access Management Federation for supporting identity discovery and single sign-on. A fictional journey shows the confusion a user can experience without proper identity management. Expresso and Wugen are presented as tools that can improve the user experience by streamlining identity discovery and authentication. Raptor is a tool for collecting usage statistics when Athens is replaced with Shibboleth. Overall feedback is sought on new identity management tools to further support institutions and publishers.

1. (Don’t shut that door) the importance of global identity to education
28th & 29th March 2012, UKSG, Glasgow
UK Access Management Federation
A partnership of JISC Collections & EDINA
Mark Williams
Operator Manager
UK Access Management Federation
JISC Collections

2. Identity in Education
• Consider the functions of identity in the discovery to delivery process
Identity before authentication
Discovery to Delivery
rather than
Access and Authentication
“What is JISC doing about Standards on Publisher interfaces?”
• New Federation tools to support institutions and publishers
• Invite input into development of some new tools
JISC Collections

3. A personal semi fictionalised journey but based on real
events
Nice tool on UKSG site – email links just like modern social networking
sites.
JISC Collections

4. There is the resource - Option for institutional login.
But where I am I really going to click institutional login click
first or the PDF I have come for?
JISC Collections

5. Now I’m confused. As a student / librarian don’t we normally get this sort
of thing for free?
How many lost souls have paid when they didn’t have to. How many have
NOT PAID. A lot of web piracy is because it is easy….
Anyhow, finally pick institutional login.
JISC Collections

6. But yet Password front and centre.
Almost looks like it is fishing for Federated credentials
It’s UKsg so why not have UK federtion at top?
JISC Collections

7. Now what’s happened. It says recognized as…. But also says LOGIN still
(not log out).
I’m back at the start – implies I’ve failed to login (although I have).
Where is the resource, I clicked on a link- didn’t pay attention to name or
number -Now I’m lost.
JISC Collections

8. Ok start searching again – I’m lucky here- only one issue of
insight to search through.
JISC Collections

9. Still not even on the right page
Users don’t care about what was before or after just want to to
the target.
JISC Collections

10. Many clicks and lengths of string later
JISC Collections

11. How it can be done
Login options offer types of authentication and choice of time
of authentication.
JISC Collections

12. Inclusion of MDUI data (institution and service provider logo
and branding) offer a clear journey to the user.
JISC Collections

13. It is now clear I have logged in as the option available now
has changed to logout.
JISC Collections

14. Like it or not, users will come via Google
University of Toronto: 5% received info lit training
UBIRD study
They will come in anywhere in the site
and anytime during the process
Library induction
Mobile devices
Give users what they want.
You can’t control them
JISC Collections

15. Discovery to Delivery tm NISO
JISC Collections

16. Expresso recommendations
• Service Provider Open Page:
• Service Provider Identity Discovery Page:
• Service Provider Protected Page:
• Institution login page:
• Rewriting OpenURLs
• Appropriate SP and IdP Use of Branding
• Error Handling
JISC Collections

17. Some clever guys at Cardiff…Phil Smart and Dr Rhys Smith
JISC Collections

18. Wugen: What is does
• Tool for librarians to create Wayfless URLs.
– A-Z lists e.g. library portal, so skip WAYF
• Automatically constructs a Wayfless URL based
on provided Idp, Sp and Target.
• Quality of Wayfless URL
– Different types, some subject to change more than
others.
JISC Collections

19. Wugen: How it works
JISC Collections

20. Wugen: Who runs it?
• One instance per federation, not per
institution.
• Full version 1 available, but needs more
testing.
• Needs work to be released by the Federation
Not available in shops yet – need your
feedback!
JISC Collections

21. RAPTOR: The same clever guys at Cardiff
JISC Collections

22. RAPTOR; Why?
• Athens -> Shibboleth = loss of stats
• Stats important for making budgetary decisions about eResources
• Raptor is a Java based AuthN system log file parser
• Shibboleth, Ezproxy, OpenAthens, FreeRadius
• Future release may see some integration directly in Shibboleth
• Designed for non technical users. But will have technical
components.
• Statistics per institution as well as aggregated to higher levels e.g.
UK federation
JISC Collections

23. JISC Collections

24. JISC Collections

25. What we want from you…………...….and what we can give you
Tell us Helpdesk
Talk to IT Tools
MDUI
Development feedback, use cases
JISC Collections

26. Useful urls
Helpdesk:
support@ukfederation.org.uk
UK Federation MDUI instructions:
http://www.ukfederation.org.uk/content/Documents/MDUIRecommendations
RAPTOR:
http://iam.cf.ac.uk/trac/RAPTOR
WUGEN:
http://iam.cf.ac.uk/urlgenerator/
NISO single sign on guidelines
http://www.niso.org/workrooms/sso
JISC Collections