<html><body><div dir="ltr">
Good perspective (make friends) Keith.</div><div dir="ltr"><br></div><div dir="ltr">Aren’t scoped assertions from the OpenAthens IdP going to be “@<a href="http://alaska.edu">alaska.edu</a>”? </div><div dir="ltr">They are not, though; they are paying customers of the for profit organization.</div><div dir="ltr"><br></div><div dir="ltr">What sort of thing would be apprpriate to "teach to" the Library liaison to OpenAthens?</div><div dir="ltr"><br></div><div dir="ltr">David<br><br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On 03Dec2021 at 13:30:33, "Wessel, Keith" <<a href="mailto:kwessel@illinois.edu">kwessel@illinois.edu</a>> wrote:<br></div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" type="cite">
<div>
<div>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
</div>
<div lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Depends on how many of your users are using discovery interfaces that list both as well as what the display name is for the OpenAthens entity. At the least, this sounds like an opportunity to make a friend at whichever of your campuses’
libraries is the contact for your OpenAthens configuration. It’s definitely a teachable moment.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Keith</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> users <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>> <b>On Behalf Of
</b>IAM David Bantz<br>
<b>Sent:</b> Friday, December 3, 2021 4:27 PM<br>
<b>To:</b> Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<b>Subject:</b> OpenAthens doppelgänger ?</p>
</div>
</div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">I haven’t been paying enough attention to OpenAthens. I just realized there is an OpenAthens federated identity provider from a for-profit organization with an entity ID and scope referring to my institution. That seems to mean that consumers
of information from the OpenAthens IdP may conclude, informally from the entity ID, and more correctly based on the scope, that the assertion is about a member of my institution. As I say, I haven’t paid enough attention to OpenAthens, so maybe I need some
’splaining, but this seems to me wrong on many levels. Is it? How concerned should I be?</p>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New";color:#881280"><md:EntityDescriptor <span class="html-attribute">… </span><span class="html-attribute-name">entityID</span><span class="html-attribute">="</span><span class="html-attribute-value"><a href="https://urldefense.com/v3/__https:/idp.alaska.edu/openathens__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd-KTek2sw$">https://idp.alaska.edu/openathens</a></span><span class="html-attribute">”</span>></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New";color:#881280">…<</span><span class="html-tag"><span style="font-family:"Courier New"">shibmd:Scope</span></span><span class="html-attribute"><span style="font-family:"Courier New""> </span></span><span class="html-attribute-name"><span style="font-family:"Courier New"">regexp</span></span><span class="html-attribute"><span style="font-family:"Courier New"">=“</span></span><span class="html-attribute-value"><span style="font-family:"Courier New"">false</span></span><span class="html-attribute"><span style="font-family:"Courier New"">"</span></span><span class="html-tag"><span style="font-family:"Courier New"">></span></span><span style="font-family:"Courier New""><a href="https://urldefense.com/v3/__http:/alaska.edu__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd8wANqQ8g$">alaska.edu</a><span class="html-tag"></shibmd:Scope></span></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><br>
<br>
</span></p>
</div>
<div>
<p class="MsoNormal"><span class="html-tag"><span style="font-family:"Courier New";color:#881280"><EntityDescriptor</span></span><span class="html-attribute"><span style="font-family:"Courier New";color:#881280"> … </span></span><span class="html-attribute-name"><span style="font-family:"Courier New";color:#881280">entityID</span></span><span class="html-attribute"><span style="font-family:"Courier New";color:#881280">="</span></span><span class="html-attribute-value"><span style="font-family:"Courier New";color:#881280">urn:mace:incommon:<a href="https://urldefense.com/v3/__http:/alaska.edu__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd8wANqQ8g$">alaska.edu</a></span></span><span class="html-attribute"><span style="font-family:"Courier New";color:#881280">"</span></span><span class="html-tag"><span style="font-family:"Courier New";color:#881280">></span></span><span style="font-family:"Courier New""><br>
<br>
</span></p>
</div>
<div>
<p class="MsoNormal">… <span class="html-tag"><span style="font-family:"Courier New""><shibmd:Scope</span></span><span class="html-attribute"><span style="font-family:"Courier New""> </span></span><span class="html-attribute-name"><span style="font-family:"Courier New"">regexp</span></span><span class="html-attribute"><span style="font-family:"Courier New"">="</span></span><span class="html-attribute-value"><span style="font-family:"Courier New"">false</span></span><span class="html-attribute"><span style="font-family:"Courier New"">"</span></span><span class="html-tag"><span style="font-family:"Courier New"">></span></span><span style="font-family:"Courier New""><a href="https://urldefense.com/v3/__http:/alaska.edu__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd8wANqQ8g$">alaska.edu</a><span class="html-tag"></shibmd:Scope></span></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><br>
<br>
</span></p>
</div>
<div>
<p class="MsoNormal"><span class="html-tag"><span style="font-family:"Courier New"">David St. Pierre Bantz</span></span></p>
</div>
<div>
<p class="MsoNormal"><span class="html-tag"><span style="font-family:"Courier New"">University of Alaska (<a href="https://urldefense.com/v3/__http:/alaska.edu__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd8wANqQ8g$">alaska.edu</a> !)</span></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<div>
-- <br>For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div>
</div>
</blockquote>
</div>
</div></body></html>