<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.html-attribute
{mso-style-name:html-attribute;}
span.html-attribute-name
{mso-style-name:html-attribute-name;}
span.html-attribute-value
{mso-style-name:html-attribute-value;}
span.html-tag
{mso-style-name:html-tag;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Depends on how many of your users are using discovery interfaces that list both as well as what the display name is for the OpenAthens entity. At the least, this sounds like an opportunity to make a friend at whichever of your campuses’
libraries is the contact for your OpenAthens configuration. It’s definitely a teachable moment.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Keith<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> users <users-bounces@shibboleth.net> <b>On Behalf Of
</b>IAM David Bantz<br>
<b>Sent:</b> Friday, December 3, 2021 4:27 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> OpenAthens doppelgänger ?<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">I haven’t been paying enough attention to OpenAthens. I just realized there is an OpenAthens federated identity provider from a for-profit organization with an entity ID and scope referring to my institution. That seems to mean that consumers
of information from the OpenAthens IdP may conclude, informally from the entity ID, and more correctly based on the scope, that the assertion is about a member of my institution. As I say, I haven’t paid enough attention to OpenAthens, so maybe I need some
’splaining, but this seems to me wrong on many levels. Is it? How concerned should I be?<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New";color:#881280"><md:EntityDescriptor <span class="html-attribute">… </span><span class="html-attribute-name">entityID</span><span class="html-attribute">="</span><span class="html-attribute-value"><a href="https://urldefense.com/v3/__https:/idp.alaska.edu/openathens__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd-KTek2sw$">https://idp.alaska.edu/openathens</a></span><span class="html-attribute">”</span>></span><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New";color:#881280">…<</span><span class="html-tag"><span style="font-family:"Courier New"">shibmd:Scope</span></span><span class="html-attribute"><span style="font-family:"Courier New""> </span></span><span class="html-attribute-name"><span style="font-family:"Courier New"">regexp</span></span><span class="html-attribute"><span style="font-family:"Courier New"">=“</span></span><span class="html-attribute-value"><span style="font-family:"Courier New"">false</span></span><span class="html-attribute"><span style="font-family:"Courier New"">"</span></span><span class="html-tag"><span style="font-family:"Courier New"">></span></span><span style="font-family:"Courier New""><a href="https://urldefense.com/v3/__http:/alaska.edu__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd8wANqQ8g$">alaska.edu</a><span class="html-tag"></shibmd:Scope></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><br>
<br>
</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="html-tag"><span style="font-family:"Courier New";color:#881280"><EntityDescriptor</span></span><span class="html-attribute"><span style="font-family:"Courier New";color:#881280"> … </span></span><span class="html-attribute-name"><span style="font-family:"Courier New";color:#881280">entityID</span></span><span class="html-attribute"><span style="font-family:"Courier New";color:#881280">="</span></span><span class="html-attribute-value"><span style="font-family:"Courier New";color:#881280">urn:mace:incommon:<a href="https://urldefense.com/v3/__http:/alaska.edu__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd8wANqQ8g$">alaska.edu</a></span></span><span class="html-attribute"><span style="font-family:"Courier New";color:#881280">"</span></span><span class="html-tag"><span style="font-family:"Courier New";color:#881280">></span></span><span style="font-family:"Courier New""><br>
<br>
</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">… <span class="html-tag"><span style="font-family:"Courier New""><shibmd:Scope</span></span><span class="html-attribute"><span style="font-family:"Courier New""> </span></span><span class="html-attribute-name"><span style="font-family:"Courier New"">regexp</span></span><span class="html-attribute"><span style="font-family:"Courier New"">="</span></span><span class="html-attribute-value"><span style="font-family:"Courier New"">false</span></span><span class="html-attribute"><span style="font-family:"Courier New"">"</span></span><span class="html-tag"><span style="font-family:"Courier New"">></span></span><span style="font-family:"Courier New""><a href="https://urldefense.com/v3/__http:/alaska.edu__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd8wANqQ8g$">alaska.edu</a><span class="html-tag"></shibmd:Scope></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New""><br>
<br>
</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="html-tag"><span style="font-family:"Courier New"">David St. Pierre Bantz</span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span class="html-tag"><span style="font-family:"Courier New"">University of Alaska (<a href="https://urldefense.com/v3/__http:/alaska.edu__;!!DZ3fjg!ss-gBE2VLSfEpyRTMYK5VOFdx_pSW4e5k8U7hArZhtkos3tYM5uHlFUeBd8wANqQ8g$">alaska.edu</a> !)</span></span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</body>
</html>