RE: OpenAthens doppelgänger ?

Tue Dec 7 07:39:22 UTC 2021

It looks like you're using an OpenAthens WAYF and that result is not unexpected.

If you use something more generic:
https://use.thiss.io/ds/
then you will see both results and I guess a user would know which one to select.

But if one of them *shouldn't* be asserting the domain, the domain should be removed from the metadata.

Kind regards,
Meshna

From: IAM David Bantz <dabantz at alaska.edu>
Sent: Monday, December 6, 2021 19:15
To: Shib Users <users at shibboleth.net>
Cc: Koren, Meshna (ELS-AMS) <M.Koren at elsevier.com>
Subject: RE: OpenAthens doppelgänger ?

*** External email: use caution ***

The displayNames of the two service providers are quite distinct and unlikely to be confused:
Alaska Medical Library v, University of Alaska Statewide System

I'm not that concerned about users choosing the "wrong" IdP in discovery.
I am concerned about the inference (from the AML entityID using a University of Alaska URL) or claim
(via the asserted scope in AML's metadata) to provide authoritative assertions about "alaska.edu<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Falaska.edu%2F&data=04%7C01%7CM.Koren%40elsevier.com%7Cbf1db3270de5455a5c5408d9b8e4524e%7C9274ee3f94254109a27f9fb15c10675d%7C0%7C0%7C637744113056943609%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=PdOt4U5Y8uNYPayQsIpjOpjOZUKR7elJGVdnR8DlLjw%3D&reserved=0>" by AML's IdP in OpenAthens.

You can find the AML IdP asserting a scope for University of Alaska via OpenAthens or met.refeds.org<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmet.refeds.org%2F&data=04%7C01%7CM.Koren%40elsevier.com%7Cbf1db3270de5455a5c5408d9b8e4524e%7C9274ee3f94254109a27f9fb15c10675d%7C0%7C0%7C637744113056953601%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ld6YsylDYIK1meVw7siukxXqWf4aKHlndFTw27ufU1k%3D&reserved=0>

In OpenAthens:

In met.refeds.org<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmet.refeds.org%2F&data=04%7C01%7CM.Koren%40elsevier.com%7Cbf1db3270de5455a5c5408d9b8e4524e%7C9274ee3f94254109a27f9fb15c10675d%7C0%7C0%7C637744113056953601%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ld6YsylDYIK1meVw7siukxXqWf4aKHlndFTw27ufU1k%3D&reserved=0>:

________________________________

Elsevier B.V. Registered Office: Radarweg 29, 1043 NX Amsterdam, The Netherlands, Registration No. 33158992, Registered in The Netherlands.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20211207/809f50f1/attachment.htm>