Moving Clients from OpenAthens SP to Shibboleth using Shibboleth-Athens Gateway

[Manoj Kancharla]

We are a Service Provider. We currently use both OpenAthens SP (1.3 and 2.0) and Shibboleth SP(2.5.3) implementations for our clients. We're planning to migrate some of our clients (that use Open Athens) to use the Shibboleth-Athens Gateway to access Athens resources using the Open Athens Federation. Some of our client's customers are already using both Athens and Shibboleth (UK Federation).

Comparing the institutions in question (that have both OpenAthens and Shibboleth currently) with the list of organisations provided on the OpenAthens site (https://auth.athensams.net/list_orgs.php), we found three variations:

1.       On the OpenAthens site, Federation Entity ID/Scope for some institutions is just listed as UKFed organisation : UK Access Management Federation website<http://www.ukfederation.org.uk/>

Organisation                                      Shibboleth Entity ID                                                       OpenAthens Federation Entity ID               OpenAthens Federation Scope
University of Hertfordshire                https://idp.herts.ac.uk/shibboleth                                   UK Federation Organisation


2.       On the OpenAthens site, we couldn't find matches for some institutions (they are not listed)



3.        On the OpenAthens site, Federation Entity ID/Scope for some institutions is different from the Shibboleth Entity ID we have for them in our database.

Examples:

Organisation                      Shibboleth Entity ID                                                       OpenAthens Federation Entity ID                 OpenAthens Federation Scope
University of Nottingham    https://idp.nottingham.ac.uk/shibboleth                        https://idp.nottingham.ac.uk/openathens                 nottingham.ac.uk
University of East Anglia     https://login.uea.ac.uk/entity                                            https://idp.uea.ac.uk/shibboleth                      uea.ac.uk

Our Questions:
For case #1, when the organisation is part of the UK Federation, could it access Athens resources seamlessly (by using the shibboleth entity ID) using the Shibboleth-Athens gateway?
For case #2, these institutions are currently using OpenAthens but are not currently listed on their site. Is this a question for Eduserv?
For case #3, institutions are part of UK Federation but have a different entity ID (for OpenAthens). Does this mean we'd have to store entity ID (in our database) of the institution at a federation level? Currrently, in our database, we store the entity ID at the institution/organization (client's customers) level.

Note: All these institutions (for the 3 cases) are currently part of UK Federation.

Your response is much appreciated.

Thanks

Manoj
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151021/0d34b5d4/attachment.html>