<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1487355490;
mso-list-type:hybrid;
mso-list-template-ids:207934070 67698703 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">We are a Service Provider. We currently use both OpenAthens SP (1.3 and 2.0) and Shibboleth SP(2.5.3) implementations for our clients. We’re planning to migrate some of our clients (that use Open Athens) to use the Shibboleth-Athens Gateway
to access Athens resources using the Open Athens Federation. Some of our client’s customers are already using both Athens and Shibboleth (UK Federation).
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Comparing the institutions in question (that have both OpenAthens and Shibboleth currently) with the list of organisations provided on the OpenAthens site (<a href="https://auth.athensams.net/list_orgs.php">https://auth.athensams.net/list_orgs.php</a>),
we found three variations:<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>On the OpenAthens site, Federation Entity ID/Scope for some institutions is just listed as
<strong><span style="font-size:8.5pt;font-family:"Verdana",sans-serif;color:#323232;background:#E5E7E1">UKFed organisation</span></strong><span class="apple-converted-space"><span style="font-size:8.5pt;font-family:"Verdana",sans-serif;color:#323232;background:#E5E7E1"> </span></span><span style="font-size:8.5pt;font-family:"Verdana",sans-serif;color:#323232;background:#E5E7E1">:<span class="apple-converted-space"> </span></span><a href="http://www.ukfederation.org.uk/"><span style="font-size:8.5pt;font-family:"Verdana",sans-serif;color:#5D3261;background:#E5E7E1">UK
Access Management Federation website</span></a><o:p></o:p></p>
<p class="MsoListParagraph"><b><u>Organisation</u>
<u>Shibboleth Entity ID</u>
<u>OpenAthens Federation Entity ID </u> <u>OpenAthens Federation Scope</u>
<o:p></o:p></b></p>
<p class="MsoNormal" style="text-indent:.5in"><span style="font-size:10.0pt;color:black">University of Hertfordshire
<a href="https://idp.herts.ac.uk/shibboleth">https://idp.herts.ac.uk/shibboleth</a> UK Federation Organisation<o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:.25in"><span style="font-size:10.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>On the OpenAthens site, we couldn’t find matches for some institutions (they are not listed)<o:p></o:p></p>
<p class="MsoListParagraph"><o:p> </o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]> On the OpenAthens site, Federation Entity ID/Scope for some institutions is different from the Shibboleth Entity ID we have for them in our database.<o:p></o:p></p>
<p class="MsoListParagraph">Examples:<o:p></o:p></p>
<p class="MsoListParagraph"><b><u>Organisation</u> <u>Shibboleth Entity ID</u>
<u>OpenAthens Federation Entity ID </u> <u>OpenAthens Federation Scope</u>
<o:p></o:p></b></p>
<p class="MsoNormal" style="text-indent:.5in"><span style="font-size:10.0pt;color:black">University of Nottingham
<a href="https://idp.nottingham.ac.uk/shibboleth">https://idp.nottingham.ac.uk/shibboleth</a>
<a href="https://idp.nottingham.ac.uk/openathens">https://idp.nottingham.ac.uk/openathens</a> nottingham.ac.uk<o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:.5in"><span style="font-size:10.0pt;color:black">University of East Anglia
<a href="https://login.uea.ac.uk/entity">https://login.uea.ac.uk/entity</a>
<a href="https://idp.uea.ac.uk/shibboleth">https://idp.uea.ac.uk/shibboleth</a> uea.ac.uk
<o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:.5in"><span style="font-size:10.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><b>Our Questions:<o:p></o:p></b></p>
<p class="MsoNormal">For case #1, when the organisation is part of the UK Federation, could it access Athens resources seamlessly (by using the shibboleth entity ID) using the Shibboleth-Athens gateway?<o:p></o:p></p>
<p class="MsoNormal">For case #2, these institutions are currently using OpenAthens but are not currently listed on their site. Is this a question for Eduserv?<o:p></o:p></p>
<p class="MsoNormal">For case #3, institutions are part of UK Federation but have a different entity ID (for OpenAthens). Does this mean we’d have to store entity ID (in our database) of the institution at a federation level? Currrently, in our database, we
store the entity ID at the institution/organization (client’s customers) level.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Note: All these institutions (for the 3 cases) are currently part of UK Federation.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Your response is much appreciated.<o:p></o:p></p>
<p class="MsoNormal"><br>
Thanks<o:p></o:p></p>
<p class="MsoNormal"><br>
Manoj<o:p></o:p></p>
</div>
</body>
</html>