1. Self-registration of non-institute patron identifiers in Aleph

2. Agenda  Aleph identifiers and aliases  Touchstone: two Identity Providers  Aleph’s handling of regular patrons  Collaboration Accounts Management System  Aleph’s handling of CAMS patrons  The primary problem and its solution Staff Training 2014 Page 2

3. Glossary of terms  CAMS: Collaboration Accounts Management System.  Aleph ID: A number that identifies a patron in Aleph.  Alias: A synonym for an aleph id.  API: Application Programming Interface.  X-server: An Aleph API. Staff Training 2014 Page 3

4. Glossary of terms  Shibboleth:Federated ID management software.  Touchstone: MIT’s branding of Shibboleth.  IdP: Identity Provider (Shibboleth)  SP: Service Provider (Shibboleth) Staff Training 2014 Page 4

5. Identifiers and Aliases in Aleph  What are they?  How does Aleph use them? Staff Training 2014 Page 5

6. Aleph identifiers – Z308 Z308_REC_KEY Z308_ID 50481 29080005932917 50481 900059159 50481 RWENGER@MIT.EDU 50481 Staff Training 2014 Page 6

7. Touchstone review  Temporary redirect to the login page  Identifier returned to the application  User redirected back to original target Staff Training 2014 Page 7

8. Production IdP (Kerberos accounts) idp.mit.edu Collaboration Accounts Management System IdP (CAMS) idp.touchstonenetwork.net Aleph Touchstone

9. Production IdP (Kerberos accounts) idp.mit.edu Aleph Touchstone rwenger@mit.edu Your Account

10. Points to remember about regular patron handling  Everybody is a number in Aleph.  Aleph uses aliases for alternate ways of identifying a patron.  Aliases must be explicitly defined before use, and require two pieces of information: the alias character string, the corresponding aleph id number.  Since Kerberos ids are predictable, the loader scripts set up all required aliases for patrons who have a Kerberos id. Staff Training 2014 Page 10

11. CAMS review  CAMS IdP 1. Open to the world for self-registration 2. No privileges attached 3. Id must be a valid email address, but NOT one with ‘mit.edu’ domain 4. Identifier returned from authentication is NOT predictable. Staff Training 2014 Page 11

12. New manually-registered patron  Circ staff member 1. creates the patron’s new Aleph id 2. creates a library card with a barcode 3. adds the barcode to the Aleph record as an alias 4. presents the library card to the patron Staff Training 2014 Page 12

13. Aleph identifiers – Z308  Non-institute patron’s aliases when the card is issued. Z308_REC_KEY Z308_ID 12345 1111111111111112345 Staff Training 2014 Page 13

14. Collaboration Accounts Management System IdP (CAMS) idp.touchstonenetwork.net Aleph Touchstone Your Account

15. Solving the alias problem  A tale of two scripts: 1. alcams1.cgi 2. alcams2.cgi Staff Training 2014 Page 15

16. Overview of the process  If the patron requests access to Your Account, two operations accomplish the task. 1. Circ staff runs the alcams1.cgi script from a form, which constructs a magic URL and emails it to the patron. form Staff Training 2014 Page 16

17. Details of alcams2.cgi - 1  At a convenient time and place the patron registers his or her Shibboleth (CAMS) identifier by clicking the magic URL that was sent from alcams1.  Example of a magic URL: http://library.mit.edu/shib/alcams2.cgi?parm=94451594151565253505 Staff Training 2014 Page 17

18. Aleph identifiers – Z308 Z308_REC_KEY Z308_ID 50481 29080005932917 50481 900059159 50481 RWENGER@MIT.EDU 50481 RICH.WENGER_1@TOUCHSTONENETWORK.NET 50481 Staff Training 2014 Page 18

19. Details of alcams2.cgi - 2  Alcams2.cgi combines four things: 1. Access to patron’s CAMS identifier. 2. Access to the patron’s Aleph id. 3. Writeable access to Aleph for updating z308 table. 4. Convenience and privacy for the patron. Staff Training 2014 Page 19

20. Experiment CAMS identifiers can be created and used with regular Aleph patron accounts.  Try the CAMS experience yourself 1. Ask the circ staff to generate the instructional email for your Aleph id. 2. Follow the steps in the email and experience what non- institute patrons experience. 3. Tell me about any difficulties. Staff Training 2014 Page 20

21. Useful links Creating a Collaboration account: http://kb.mit.edu/confluence/display/istcontrib/Creating+a+Touchstone+Collab oration+Account http://kb.mit.edu/confluence/display/istcontrib/Creating+a+Touchstone+Collab oration+Account Touchstone at MIT: http://ist.mit.edu/touchstone http://ist.mit.edu/touchstone Staff Training 2014 Page 21

22. Finis Staff Training 2014 Page 22 Rich Wenger rwenger@mit.edurwenger@mit.edu Phone 617-253-0035