- FIM4L - lists3.daasi.de

Announcement: FIM4L 'Guidelines and Recommendations' now open for comments
by Jos Westerbeke 03 Mär '20

03 Mär '20

Dear all, Thanks to all of you participating in the FIM4L initiative, we now have our 'Guidelines and Recommendations' document ready and open for public comments. Please find the introduction and links to the document here: https://libereurope.eu/blog/2020/03/02/fim4l-recommendations/. The 'Guidelines and Recommendations' document is published for comments on the Discuto platform<https://www.discuto.io/en/consultation/33970>. Or can be downloaded as a PDF here<https://libereurope.eu/wp-content/uploads/2020/03/FIM4L-Guidelines-Consulta…>. Comments are welcome by April 30th. We kindly ask you to share this message through your channels. (Linkedin, library consortia lists, etc.) FIM4L Working Group<https://libereurope.eu/strategy/research-infrastructures/fim4l/> http://fim4l.org Jos Westerbeke

1 0

Reasonable lenght of SP's session
by Koren, Meshna (ELS-AMS) 28 Feb '20

28 Feb '20

Dear all, I have another question which I posted on another thread earlier... >From the library's perspective, what is a reasonable time for an SP to maintain a session for a user? It would have been possible for Elsevier to maintain a session for any lenght of time - but is that desirable by the libraries? Should we confirm with the library that a user is still affiliated with it whenever a user wants to access the service (such as ScienceDirect)? Or every day? Every week? Every month? Every 6 months? Thanks, Meshna Meshna Koren Associate Product Manager Product Management - Identity and Access - Research Products Elsevier BV Radarweg 29, Amsterdam 1043 NX, The Netherlands m.koren(a)elsevier.com<mailto:m.koren@elsevier.com> Federated Access - SAML, Shibboleth, Corporate SSO, OpenAthens, Institutional Login ________________________________ Elsevier B.V. Registered Office: Radarweg 29, 1043 NX Amsterdam, The Netherlands, Registration No. 33156677, Registered in The Netherlands.

6 7

Re: [Fim4l] FIM4L call 24Feb2020 notes
by Jos Westerbeke 27 Feb '20

27 Feb '20

Hi Friedel, Thank you for this. I also think it would be good to first resolve our own amendments. Here's my bet: Par1, comment 1 and 3: replace "customers of scholarly libraries" with: "authorized users of institutions for higher education and research" === rest will follow... I'll send you more after 15:00hr. Maybe you can call me then, to do it together? Or jump on https://meet.google.com/ppq-dqwn-zgo with Raoul? I'm now for one hour in a meeting. cheers, Jos | +31 640295513 On 27/02/2020, 10:10, "Friedel Grant" <Friedel.Grant(a)KB.nl<mailto:Friedel.Grant@KB.nl>> wrote: Good morning everyone – I started the process of cleaning up comments, in order to launch the consultation process. What I have just discovered is that I can’t selectively delete comments (e.g. test messages). I can either leave them all in place (which looks messy with all the tests), or delete all comments in order to start the consultation with a clean sheet. My feeling is that the best option is to start with a clean sheet. I’ve addressed the easy issues already (e.g., adding links, fixing typos). The attached spreadsheet contains the paragraphs/comments which need your input (remarks from me in red bold). Can the group discuss and agree on edits? If so, I will implement the new wording and then delete all comments for the start of the official consultation. Kind regards, Friedel Van: Jos Westerbeke [mailto:jos.westerbeke@eur.nl] Verzonden: maandag 24 februari 2020 15:37 Aan: FIM4L-WG(a)libereurope.eu Onderwerp: FIM4L call 24Feb2020 notes Hi all, Here you find some notes of the latest call. We finished the blogpost<https://docs.google.com/document/d/1N1tQ51yflJJQTvevdmoYH6c9J5fsmapYOjfKNzW…> for the LIBER website to announce the Recommendations for public comments. We decided to use discuto as a platform with on top of it (when needed because of a bug) a note that you first have to login before giving comments. And the ability to download a PDF file that can be used to send back to LIBER with comments. Friedel will set this up, coming Thursday. Jos will prepare an email to send to the broader FIM4L listserv when setup is ready. The announcement would be distributed on: - LIBER website and members (Friedel) - FIM4L list (Jos) - IFLA (Jos) - Channels by Leonidas. (Greece) - Channels by Lee. (UK) - etc. etc. About the website. The idea is to have an dedicated website for FIM4L with address fim4l.org. Jos will set up a working document to describe the website and its content. Leonidas noted that HEAL-Link<https://www.heal-link.gr/en/aai-infrastructure/> is familiar with WordPress and is likely willing to host a FIM4L website. (Thanks Leonidas!) Seamless Access update: They are working on designing a new entity category for libraries, or maybe more entities. (Like R&S category<https://refeds.org/category/research-and-scholarship>) There is still a discussion going on. And a survey is send out to IT and library people about federated authentication and cooperation between IT dept. and Libraries in organizations. A presentation at IFLA is a good idea. There are valuable network opportunities. Peter G. showed interest earlier. Leonidas maybe. Jos will look for possibilities. (Proposal deadline 15 March.) Thank you all! And all the best, Jos -- To unsubscribe from this group and stop receiving emails from it, send an email to FIM4L-WG+unsubscribe(a)libereurope.eu<mailto:FIM4L-WG+unsubscribe@libereurope.eu>. -- To unsubscribe from this group and stop receiving emails from it, send an email to FIM4L-WG+unsubscribe(a)libereurope.eu<mailto:FIM4L-WG+unsubscribe@libereurope.eu>.

1 0

Federated access - Walk-In
by Koren, Meshna (ELS-AMS) 25 Feb '20

25 Feb '20

Dear all, Many libraries can, as part of their agreement with a publisher, provide access to subscribed publications to users that visit the premises. That's easy enough when the library has IP address access configured with the publisher. Has anyone given any thought to how that would work with federated access, where libraries don't use IP address authentication? And if yes, are there any thoughts or tips to be shared? Thanks, Meshna Meshna Koren Associate Product Manager Product Management - Identity and Access - Research Products Elsevier BV Radarweg 29, Amsterdam 1043 NX, The Netherlands m.koren(a)elsevier.com<mailto:m.koren@elsevier.com> Federated Access - SAML, Shibboleth, Corporate SSO, OpenAthens, Institutional Login ________________________________ Elsevier B.V. Registered Office: Radarweg 29, 1043 NX Amsterdam, The Netherlands, Registration No. 33156677, Registered in The Netherlands.

6 5

Survey for people working in IT or library in higher education and research
by Raoul Teeuwen 10 Feb '20

10 Feb '20

Hi all. As employee of Dutch NREN SURF, i'm currenlty a member of the Seamless Access Outreach team. Seamless Access, the non-profit that is trying to improve ways students etc access publisher content (and maybe more), would like to better understand the knowledge and use of federated technology in libraries and IT at institutions. For that, they would like people from IT and libraries to fill out the a short survey. Could you help get this out to institutions in as many countries and institutions, ideally to someone/people that help get the below message not only in the hands of either IT or library, but both? Thank you. Raoul. >>>> example message you could forward to institutions in your national federation Hello. This message is relevant for people that work in institutions for higher education and research, all over the world, both people from the library department and IT department. Is that you: please read on. Not you? Please forward this message to a colleague, relevant mailing list where the intended audience meets etc Over the last couple of years, many things have changed around how students and researchers access publisher content. Access based on IP-address doesn’t suffice anymore. Seamless Access <https://seamlessaccess.org/>, a non-profit collaboration of librarians, HigherEd IT and publishers, is trying to improve current access challenges. Understanding the situation in institutions helps Seamless Access deliver the best solutions. They hope as many people from institutions around the world fill out: a) a short questionnaire for people working in a library in an institution for higher education or research: https://bostoncollege.co1.qualtrics.com/jfe/form/SV_0Cbp6fmldW3iLFb b) a short questionnaire for people working in IT in an institution for higher education or research: https://bostoncollege.co1.qualtrics.com/jfe/form/SV_0Vv0iXWMLZMd9VH We hope you fill out a survey right away as not to forget it, but you can send in your entry until March 27th. Thank you very much for your time and cooperation. In case you want to know where we have shared these surveys, please see https://docs.google.com/document/d/1ShPEhqrUMeBbN9ggC1N0y1rMucSNtob0SDym2uJ…. Thank you for your time and cooperation, with kindest regards, Seamless Access.

2 1

Fwd: Clarifications About the SeamlessAccess.org Service
by Heather Flanagan 27 Jan '20

27 Jan '20

Hello FIM4L, You might be interested in a letter I sent recently to Service Providers who are somewhere on the path to using the Advanced Integration model with SeamlessAccess. Questions are always welcome! -Heather > Begin forwarded message: > > From: Heather Flanagan <heather(a)seamlessaccess.org> > Subject: Clarifications About the SeamlessAccess.org Service > Date: January 13, 2020 at 9:49:23 AM PST > To: Laura Paglione <laura(a)seamlessaccess.org> > > Hello SeamlessAccess integrators, past, present, and future, > > Following feedback before and during the Internet2 Technology Exchange <https://meetings.internet2.edu/2019-technology-exchange/>, the Seamless Access program is reviewing the permissible use of the stored Identity Provider (IdP) preference information when using some of the SeamlessAccess.org <http://seamlessaccess.org/> integration models (see our “Getting Started <https://seamlessaccess.org/get-started/>” page for more information about the different integration models). > > What we realized is that in its current form, authorized Service Providers (SPs) using the advanced integration model <https://seamlessaccess.org/get-started/> may be able to access stored IdP choices before a user logs into that SP’s service. When a website authorized to use SeamlessAccess connects their Federated Identity Management (FIM) service, the website can see the user’s previous choice of IdP before any user authentication occurs. This design choice was originally made to enable full flexibility of the user interface for advanced integrators, for example, to display the preferred IdP in the interface. Further, integrators using the limited and standard integration models are unable to access stored IdP choices. > > We now understand that the current situation has some privacy implications that take the service beyond what SeamlessAccess has been promising. For example, a SeamlessAccess-authorized SP could potentially collect information about exactly which IdPs are preferred by the user (which is often correlated to a person’s affiliation) without the user being aware. While the persisted choice of IdP is not considered personally identifiable information (see the WAYF Cloud and P3W Security & Privacy Recommendations <https://ra21.org/index.php/results/ra21-security-privacy-final-report/> from RA21 for more detail) the exposure of any information outside of what matches a more traditional authentication flow runs counter to the principles of SeamlessAccess. > > The SeamlessAccess Governance Committee is currently evaluating several options to remediate this unintended possibility, including, but not limited to: > Changes to the advanced integration API which make it impossible to access the stored IdP choices while still allowing the UI customization and integration with local discovery services for which this model was originally intended. > A UI mechanism to allow users to grant permission to SPs to access their stored IdP preference information. > Clear prohibition in the Terms of Use of SeamlessAccess of utilization of stored preference information in any way that is not intended. > > In order to become an authorized SP for the advanced integration model using our production service, the SP has to follow a process that includes a review of their proposed integration with SeamlessAccess. The SeamlessAccess governance committee is currently working with appropriate legal counsel to develop a strong Terms of Service and Privacy Statements that will be part of authorizing any new SP. A link to the onboarding process and appropriate policies will be made available on the SeamlessAccess website as soon as they are complete. > > As we have more information and documentation on how to integrate with SeamlessAccess, we will let you know. > > Heather Flanagan, Program Director, SeamlessAccess.org <http://seamlessaccess.org/>

3 3

Conferences
by Jos Westerbeke 22 Jan '20

22 Jan '20

Hi all, Anyone planned to be at ELAG 2020 conference<https://elag2020.lnb.lv/about-elag/>? This will be held in Riga, Latvia, June 9-12. Here FIM4L could present/elaborate on the more technical side of FIM. Anyone interested to give a presentation at ELAG? Please let me know. Peter van Boohemen (FIM4L member) is chair of the ELAG committee. Proposal deadline is February 12. Further: The FIM4L WG<https://libereurope.eu/strategy/research-infrastructures/fim4l/> submitted an abstract for a presentation at LIBER 2020 conference<https://liberconference.eu/about/> in Belgrade, Serbia, Jun 24-26. Pieter Gietz and I would like to present. This could be a great opportunity to meet each other over there! Welcome! We worked hard to get our Guidelines and Recommendations ready for public comments. Here it is<https://docs.google.com/document/d/1pIaEXfw9ZWnXM4p6Dd2Lri7RFWKgr7ObKLEGfUy…>. I think we can publish it by the end of January. (December was too busy;) If you find something needed to be edited, please let it know by a comment in the document. all the best, Jos

2 1

Re: [Fim4l] Intro
by Jos Westerbeke 13 Dez '19

13 Dez '19

Hi Tim and John Felts (cc, joined Tuesday) Both of you very welcome to FIM4L! -Jos Jos Westerbeke Library IT Specialist / Demandmanager | Erasmus University Rotterdam, Library | Burgemeester Oudlaan 50 | 3062PA Rotterdam | jos.westerbeke(a)eur.nl<mailto:jos.westerbeke@eur.nl> | +31 640295513 On 12/12/2019, 15:28, "FIM4L on behalf of Tim McGeary" <fim4l-bounces(a)lists.daasi.de<mailto:fim4l-bounces@lists.daasi.de> on behalf of tim.mcgeary(a)duke.edu<mailto:tim.mcgeary@duke.edu>> wrote: Hi all, As requested from joining the list, I wanted to introduce myself. I am Tim McGeary, Associate University Librarian for Digital Strategies and Technology. I participate in the Technical Steering Committee for the Seamless Access project as a member of the research library community, and am active in leading responsible use of data while protecting user privacy. I look forward to being part of this list. Cheers, Tim Tim McGeary Associate University Librarian for Digital Strategies and Technology Duke University Libraries 919-660-5802 tim.mcgeary(a)duke.edu<mailto:tim.mcgeary@duke.edu> Google/Skype/Twitter: timmcgeary The Duke University Libraries value diversity of thought, perspective, experience, and background and are actively committed to a culture of inclusion and respect.

1 0

Intro
by Tim McGeary 12 Dez '19

12 Dez '19

Hi all, As requested from joining the list, I wanted to introduce myself. I am Tim McGeary, Associate University Librarian for Digital Strategies and Technology. I participate in the Technical Steering Committee for the Seamless Access project as a member of the research library community, and am active in leading responsible use of data while protecting user privacy. I look forward to being part of this list. Cheers, Tim Tim McGeary Associate University Librarian for Digital Strategies and Technology Duke University Libraries 919-660-5802 tim.mcgeary(a)duke.edu<mailto:tim.mcgeary@duke.edu> Google/Skype/Twitter: timmcgeary The Duke University Libraries value diversity of thought, perspective, experience, and background and are actively committed to a culture of inclusion and respect.

1 0

GetFTR
by Jiri Pavlik 12 Dez '19

12 Dez '19

Dear all, you may like to check https://www.getfulltextresearch.com/ Best regards Jiri

6 10