- FIM4L - lists3.daasi.de

ORCID / FIM Affinity Group Side Meeting @ TNC 21
by Laura Paglione 01 Jun '21

01 Jun '21

Hi -- Please excuse the cross-posting. ORCID would like to invite you to the following upcoming meeting, a side meeting of TNC21. Hope to see you there! *FIM / ORCID AFFINITY GROUP MEETING* Collaboration between ORCID, Federation participants, and FIM solutions has grown. Federations lead ORCID consortia of institutions; ORCID signin has been considered as an IdP of Last Resort for research collaboration tools; unique Institutional credentials have been linked to over 320,000 ORCID accounts, ORCID iDs are included in the eduPerson schema; and iDs are sometimes used to better understand identity linkages when individuals change institutions. Conversations happen globally among ORCID, federation operators, practitioners, software providers, and standards committees, though rarely over the entirety of this group at the same time. Here we convene to consider strategic topics that involve the ORCID platform or iDs, and deepen collaboration among the ORCID and FIM communities. Thursday, 17 June 2021 | 13:30 - 15:30 CEST (online) Registration: https://events.geant.org/event/865/ (no charge) WHO IS THIS MEETING FOR? Individuals from federation operators, practitioners, software providers, and standards committees that have been involved in ORCID connections. Also welcome are individuals that want to learn more about how the ORCID and FIM communities are collaborating. Thanks! Best, Laura Paglione (on behalf of ORCID) [image: https://laurapaglione.com] <https://laurapaglione.com> Be different. Laura Paglione LauraPaglione.com <https://laurapaglione.com/> lpaglione(a)SphericalCowGroup.com <lpaglione(a)sphericalcowgroup.com>

1 0

Critical article
by Jos Westerbeke 19 Apr '21

19 Apr '21

Hi all, Please read following article: https://elephantinthelab.org/when-your-journal-reads-you/ What about the idea to write an official FIM4L response? I think we can note that: * It is time that libraries indeed need to fight this problem. * Both libraries and publishers should work on this. * SSO authentication methods can be used to reach the goal of better privacy, rather than IP-based authentication. * Libraries and publishers need to work together on protecting users' privacy. * We need to work together towards a new trust model anchored in a contract. * Only together we can make a safe 'information journey' for researchers and students. * We need each other, even when articles are published in Open Access. We can create a safe logon and can agree on a contractual basis that a publisher provides a safe journey for an authenticated user, rather than not authenticated users who are exposed to whatever the publisher is looking for. All the best, Jos Jos Westerbeke Library IT specialist/manager | Erasmus University Rotterdam, Library | Burgemeester Oudlaan 50 | 3062PA Rotterdam | jos.westerbeke(a)eur.nl<mailto:jos.westerbeke@eur.nl> | +31 640295513

3 2

Re: [Fim4l] LexisNexis Advance
by Jiri Pavlik 02 Apr '21

02 Apr '21

Hi Bernd, I see, eduPersonScopedAffiliation (required) eduPersonEntitlement (required) is working for Freiburg University and eduPersonScopedAffiliation (required) eduPersonEntitlement (required) eduPersonTargetedID (required) is not. The university students and staff are free to use personalisation at Lexis Nexis, Elsevier, EBSCO, ProQuest services if they want to so eduPersonScopedAffiliation (required) eduPersonEntitlement (required) eduPersonTargetedID (optional) is working for the University as well. Is it correct? All the best Jiri > >> On Sat, Mar 13, 2021 at 2:40 PM Bernd Oberknapp <bo(a)ub.uni-freiburg.de> >> wrote: >> >>> Hi Jiri, >>> >>> On 13.03.21 09:15, Jiri Pavlik wrote: >>> >>> > When checking ProQuest SP for ProQuest Central in DFN-AAI metadata [1] >>> > I can see both eduPersonEntitlement and eduPersonTargetedID as >>> required >>> > attributes. >>> >>> I assume you mean the SP >>> https://shibboleth-sp.prod.proquest.com/shibboleth? That's obviously >>> wrong, both eduPersonScopedAffiliation and eduPersonEntitlement are >>> supported for authorization, but as far as I can tell you don't have to >>> use them, and eduPersonTargetedID isn't required. >>> >>> > Is it safe to assume that if there is personalisation capability at a >>> > library service then all German universities, libraries are fine with >>> > releasing eduPersonTargetedID for recognising returning users and >>> > eduPersonEntitlement, eduPersonScopedAffiliation for authorisation? >>> >>> No. I can't speak for other IdPs, but in my opinion that approach would >>> be wrong, users by default should be able to use services anonymously, >>> without being recognized as a returning user. Based on what I can see in >>> the admin tools, only a very small percentage of our users actually uses >>> the personalization features, so releasing eduPersonTargetedID by >>> default just for personalization isn't an option. If publishers would >>> force us to send an eduPersonTargetedID just for personalization I would >>> consider dropping Shibboleth for those publishers and using our EZproxy >>> instead. >>> >>> Best regards, >>> Bernd >>> >>> -- >>> Bernd Oberknapp >>> Gesamtleitung ReDI >>> >>> Albert-Ludwigs-Universität Freiburg >>> Universitätsbibliothek >>> Platz der Universität 2 | Postfach 1629 >>> D-79098 Freiburg | D-79016 Freiburg >>> >>> Telefon: +49 761 203-3852 >>> Telefax: +49 761 203-3987 >>> E-Mail: bo(a)ub.uni-freiburg.de >>> Internet: www.ub.uni-freiburg.de >>> >>>

7 38

LexisNexis Advance
by Jiri Pavlik 13 Mär '21

13 Mär '21

Deal all, in eduGAIN LexisNexis Advance SP request optionally eduPersonScopedAffiliation and eduPersonTargetedID attributes. [1] In Austrian eduID.at it requests these two attributes as required. [2] In French RENATER it requires eduPersonScopedAffiliation, eduPersonTargetedID, givenName, sn, mail attributes and supports Code of Conduct and Sirtfy entity categories. [3] I am wondering whether everyone could be fine with following set of attributes along with CoCo and Sirtfy entity categories support: eduPersonScopedAffiliation (required) eduPersonTargetedID (optional) givenName (optional) sn (optional) mail (optional) Universities/libraries may choose to release just eduPersonScopedAffiliation and be FIM4L privacy stars. It will correspond to the upcoming REFEDS Anonymous Authorisation entity category. [4] Universities/libraries may also choose to release eduPersonScopedAffiliation and eduPersonTargetedID for enabling personalisation capabilities. It will correspond to the upcoming REFEDS Pseudonymous Authorisation entity category. [5] And finally universities/libraries may also choose to release eduPersonScopedAffiliation, eduPersonTargetedID and let users decide about releasing name and e-mail address. [6] Do you like this kind of approach? Take care Jiri Pavlik, techlib.cz 1. https://met.refeds.org/met/entity/https%253A%252F%252Fsignin.lexisnexis.com… 2. https://met.refeds.org/met/entity/https%253A%252F%252Fsignin.lexisnexis.com… 3. https://met.refeds.org/met/entity/https%253A%252F%252Fsignin.lexisnexis.com… 4. https://wiki.refeds.org/display/CON/Entity+Category+Consultation+Anonymous+… 5. https://wiki.refeds.org/display/CON/Entity+Category+Consultation+Pseudonymo… 6. https://www.youtube.com/watch?v=znpjHR6LOxs

4 15

REFEDS Consultation - eduPerson Analytics ID
by Jiri Pavlik 11 Mär '21

11 Mär '21

Dear all, ever wanted to have statistics reports for e-resources by university faculties, campuses, departments? Then you may like to check REFEDS consultation regarding new attribute proposed to be added to the eduPerson schema: https://wiki.refeds.org/display/CON/Consultation%3A+eduPersonAnalyticsID Credits to Heather Flanagan for the consultation info at SeamlessAccess March 2021 Newsletter. Kind regards Jiri

1 0

Introduction Ivo Zelis FIM4L mailing list
by Zelis, Ivo (UB) 10 Feb '21

10 Feb '21

Hi all, This email is intended as my short introduction to the email list. I am Ivo Zelis and I work as a Library Systems Admin and Collection Analyst at Maastricht University library. We are interested in FIM4L since the tensions between one general manner of authentication and the maximum protection of the identity of our users is a topic that should be high on the agenda of libraries and publishers. We believe this could be established by a collective consensus as is one of the goals of this initiative. Further, I consent to having my name published on the website. Met vriendelijke groet/Kind regards, Ivo Zelis [UM_logo_handtekening_standaard] Ivo Zelis MSc. Library Systems & Collection Analyst Universiteitsbibliotheek Werkdagen: Maandag t/m vrijdag ivo.zelis(a)maastrichtuniversity.nl<mailto:ivo.zelis@maastrichtuniversity.nl>

2 1

FIM4L Newsletter January 2021
by Jos Westerbeke 29 Jan '21

29 Jan '21

Hello everyone, We would like to give you a brief update about the FIM4L activities. --- FIM4L<https://www.fim4l.org/> is a non-profit initiative led by libraries with the main purpose of creating and maintaining recommendations for configuring federated SSO authentication for library e-resources in the most privacy preserving way. It has a working group<https://libereurope.eu/working-group/liber-fim4l-working-group/> under the umbrella of LIBER<https://libereurope.eu/working-group/liber-fim4l-working-group/>, currently the base of FIM4L. FIM4L recommendations are published at the FIM4L website<https://www.fim4l.org/?page_id=257> and the Zenodo<https://zenodo.org/record/4118124#.X5GqWUIzblx> platform. Please join our Mailing List<https://lists.daasi.de/listinfo/fim4l> for information and discussions. --- ACTIVITIES Promotion We have submitted a proposal for UKSG<https://www.uksg.org/newsletter/uksg-enews-475/uksg-annual-conference-2021-…> annual conference. We will submit a proposal for LIBER<https://libereurope.eu/article/liber-2021-online-call-for-papers/> 2021 annual conference. The IFLA<https://www.ifla.org/annual-conference/future-congresses> annual conference in Rotterdam (NL) went to an online conference. We hope that our planned presentation will stay on the program. Peter Gietz will present on a DFN (the German NREN) event about FIM4L and SA<https://seamlessaccess.org/> (with co-author) in March. Hopefully, we can show this year more about how to use the FIM4L recommendations. Meeting with CAR representatives In January we had a meeting with Rob Carter (Duke University) and Ken Klingenstein (Internet2) about the Consent informed Attribute Release<https://spaces.at.internet2.edu/display/CAR/CAR%3A+Consent-informed+Attribu…> tool. This software can be useful whenever personal attribute release is needed for some reason. We plan to schedule a second meeting. More info will follow, but since it can be useful in many situations, not just in connection with FIM4L, we recommend you to check out their initiative. Moving on with recommendations Since we are thinking about how we can improve our recommendations in a next release and creating new ideas, we've created a new document <https://docs.google.com/document/d/1fae_IDch-wOkgnBD_3MaZCHOsQ7pLxzXvl7h7Vk…> for moving on to a new version, or addendum to the current version. Please, share your ideas! Comments are more than welcome. It's open for "anyone with the link" to comment. (FIM4L members have/can get edit rights, please let me know.) We are also working behind the scenes to get more research library consortia/associations supporting the FIM4L principles & recommendations. Wishing you all the best and stay safe! Jos Jos Westerbeke Library IT specialist/manager | Erasmus University Rotterdam | Burgemeester Oudlaan 50, Library | 3062 PA Rotterdam | jos.westerbeke(a)eur.nl | +31 640295513

1 0

World is not covered with NREN's and good AAI
by Jos Westerbeke 05 Jan '21

05 Jan '21

Hi all, Today we (Raoul, Peter G. and me) had a call with EIFL (https://eifl.net/page/about ) representatives initiated by Romy Beard (cc) and several others from countries including Georgia. Several countries in eastern Europe and Africa are seeking to implement federated authentication & authorization infrastructure. This is a rather struggling task to build up NREN's like we are familiar with. They would have like to hear the 'library voice' about this and that's why they found FIM4L. But they need some help or guidance to build the backbone of AAI. Raoul and Peter G. where kind to provide some helpful information. It just triggers me that obviously not every country has the luxury of good working NREN's. If there's anyone out there who is happy to help, you can contact Romy. She can connect you to appropriate persons. All the best and stay healthy, Jos

8 17

GetFTR - Webinar - 10th December 2020
by Jos Westerbeke 03 Dez '20

03 Dez '20

For your interest, Jos *With apologies for cross posting* Posting on behalf of GetFTR<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.getfu…> Nearly a year on from its announcement at the annual STM Conference, the GetFTR team and advisory board would like to invite you to join an informal chat to update you on its development and talk openly about its plans for 2021. This seminar will lift the lid further on GetFTR and will be an opportunity for you to ask questions and explore how GetFTR serves library users. So please join: · Ralph Youngen, Senior Director of Technology Strategy & Partnerships at the American Chemical Society (ACS) · Lisa Janicke Hinchliffe, Professor/Coordinator for Information Literacy Services and Instruction at the University of Illinois Library at Urbana-Champaign · Laird Barrett, Senior Product Manager, Data Development Springer Nature For a 30 minute informal discussion. Your feedback and participation would be very much welcome. Please register here<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgetfullte…> *GetFTR is a new service that enables faster access for researchers to the published journal articles they need. Working on- and off-campus and built on trusted technology, GetFTR is now inviting providers of online research services and publishers to be part of its development.*

1 0

Financial Times requires users to supply email address etc.
by Jos Westerbeke 18 Nov '20

18 Nov '20

Hi all, The message below about FT was sent to internal LIBER FIM4L working group list. Appropriate to share it on the general FIM4L listserv. We will reach out to FT as FIM4L group, showing our recommendations. Best, Jos ________________________________ From: Jos Westerbeke <jos.westerbeke(a)eur.nl> Sent: 16 November 2020 10:21 To: Jiri Pavlik <jiri.pavlik(a)techlib.cz>; Raoul Teeuwen <raoul.teeuwen(a)surf.nl> Cc: fim4l-wg(a)libereurope.eu <fim4l-wg(a)libereurope.eu> Subject: Re: InCites now requires users to supply email address and create a new set of credentials Hi Raoul, all, Erasmus also has a license by Financial Times. We began talks in 2018 which lasted a year (!) and ended up in using just IP based access with option to register personally by email and a lot of PII. I spoke with FT account manager personally and emailed with FT SSO specialists. But we couldn't come to a solution. At that time, July 2019, I need to say. The reason was obvious and understandable: They wouldn't make the change in their SSO solution for our university, which impacted thier clients all over the world. Another difficulty here, FT is a commercial party with its own business. They do not so feel the typical library policy about providing information for academic and social interests. So, in the end we set up a personal contract between FT and Erasmus university. BTW, FT pushed us to use SSO. But we could make it with IP based access "as long as FT does not provide good SSO"😉 I think now it's the time to go to FT as a FIM4L/library community. That hopefully will make more sense. So I think yes, good idea to reach out to FT. @Jiri: I'll ask a colleague from Tilburg Uni. @Raoul: can we share this on the general FIM4L list? Best, Jos ________________________________ From: Jiri Pavlik <jiri.pavlik(a)techlib.cz> Sent: 16 November 2020 09:40 To: Raoul Teeuwen <raoul.teeuwen(a)surf.nl> Cc: fim4l-wg(a)libereurope.eu <fim4l-wg(a)libereurope.eu> Subject: Re: InCites now requires users to supply email address and create a new set of credentials Hi Raoul, Thanks for bringing FT to attention. IMHO there should be a Seamless Access sign-in button at FT Sign in page and Seamless Access WAYF. E-mail address, name, occupation, phone number should be optional, not mandatory to fill in for personalisation after institutional sign in. eduPersonEntitlement should be used for authorization. Maybe Jos knows colleagues from Tilburg University who will be happy to join FIM4L and pass FIM4L recommendations to FT. I am not aware of any FT subscribers in Czech Republic unfortunately. Or maybe Stefan Paetow may be interested to approach FT since the SP is registered in eduGAIN via UK Federation Best regards Jiri On Sat, Nov 14, 2020 at 12:34 AM Raoul Teeuwen <raoul.teeuwen(a)surf.nl<mailto:raoul.teeuwen@surf.nl>> wrote: Is this another scenario like Clarivate? Anyone with institutional access to ft.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fft.com%2F&…> that can test? A colleague of mine also studies at one of our Dutch universities. They have a subscription to the Financial Times. He accessed ft.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fft.com%2F&…>, authenticated via the university and was presented this: [cid:image001.png@01D6BDB9.4CEC91E0] The connection to ft.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fft.com%2F&…> is configured to only release eduPersonTargetedID. If he clicks the blue sign in button, he gets this: [cid:image002.png@01D6BDB9.4CEC91E0] Clicking SSO presents the former screen. Kindest regards, met vriendelijke groet, Raoul Teeuwen

1 0