This has been and will continue to be a topic for CNI, and there is a brief
report that CNI published in 2016 that may be a good place to start:

https://www.cni.org/publications/cliffs-pubs/authentication-authorization-survey-2016

Tim

--
Tim McGeary
AUL for Information Technology Services
Duke University


On Wed, Aug 9, 2017 at 4:11 PM, Tod Olson <[log in to unmask]> wrote:

> Most of the larger content providers and other service providers do
> support SSO. Smaller content or service providers, not so often. Since
> you're in the U.S., check the list of participants in the InCommon
> Federation, which is the federation for higher education in the U.S.:
> https://www.incommon.org/participants/.
>
> We've had increasing difficulty keeping proxy server configurations
> working as time goes on, web applications become more complex, and browsers
> become more strict in various ways.
>
> We're not ready to get rid of the proxy server yet, there's a combination
> of non-Shibboleth vendors and campus culture to consider, but I look
> forward to that day!
>
> -Tod
>
>
> Tod Olson <[log in to unmask]<mailto:[log in to unmask]>>
> Systems Librarian
> Interim Director for Integrated Library Systems
> University of Chicago Library
>
> On Aug 9, 2017, at 2:44 PM, Pennington, Buddy D. <[log in to unmask]
> <mailto:[log in to unmask]>> wrote:
>
> Do vendors even directly support SSO? We use SSO to enable users to
> authenticate into EZProxy for IP-based access to our electronic resources.
> I didn't think cutting out EZProxy and just going with SSO was an option.
>
> Buddy Pennington
> Director of Information Technology and Strategy
> University of Missouri--Kansas City
> Miller Nichols Library
> 800 East 51st St.
> Kansas City, MO 64110-2499
> [log in to unmask]<mailto:[log in to unmask]>
> 816-235-1548
> UMKC Libraries
>
>
> -----Original Message-----
> From: Code for Libraries [mailto:[log in to unmask]] On Behalf Of
> Jimmy Ghaphery
> Sent: Wednesday, August 09, 2017 2:36 PM
> To: [log in to unmask]
> Subject: Re: [CODE4LIB] Wanted: Good overview article comparing new
> authentication/access control options (Shibboleth, OpenAthens, SAML, etc.)?
>
> I'll second Bethany's point on many smaller vendors just now moving to IP
> authentication. If it consoles campus IT tell them they are right....it has
> been at least 10 years since I have been hearing that proxy servers are a
> thing of the past, but that the working normal across most libraries is
> IP/proxy authentication.
>
> Best,
>
> Jimmy
>
>
> ----------------------------------------
> Jimmy Ghaphery
> Associate University Librarian for Scholarly Communications and Publishing
> VCU Libraries
> 804-827-3551
> ORCID: 0000-0001-8043-7701 <http://orcid.org/0000-0001-8043-7701>
>
> On Wed, Aug 9, 2017 at 3:26 PM, Goodwin, Bethany <[log in to unmask]>
> wrote:
>
> I'd be interested in hearing any feedback as well. Some of my vendors
> are smaller and we're lucky to have IP authentication with ezproxy.
>
> Bethany
>
> Bethany Goodwin
> Electronic Resources Librarian
> Rolfing Memorial Library | Trinity International University
> 2065 Half Day Road, Deerfield, IL 60015 [log in to unmask] |
> 847-317-4006
>
> On Wed, Aug 9, 2017 at 2:18 PM, Cynthia Harper <[log in to unmask]> wrote:
>
> Hi - Can anyone provide some good documents on current trends in
> alternatives to proxy servers?   My campus is looking into Single Sign-On
> for the first time, and the campus technical people believe that
> proxy servers are a thing of the past, but I don't know whether all
> of our vendors will be able to support an alternative method.
>
> Thanks for your help.
> Cindy
>



-- 
Tim McGeary
[log in to unmask]
GTalk/Yahoo/Skype/Twitter: timmcgeary
484-294-7660 (Google Voice)