1. Access & Identity Management “An integrated set of policies, processes and systems that allow an enterprise to facilitate and control access to online resources for their users” RSA Security No magic bullet Not about technology itself

2. Organisational Single sign-on – the future Local web resourcesExternal web resources VLE Portal OPAC Database Journals Local authentication System usernames & passwords User attributes Names, email, role Directory SSO Authentication transfer protocol e.g SAML, Shibboleth, AthensDA Single copy of data managed centrally accurate & reliable & secure Users become accountable & auditable

3. Beyond IP authentication: Federation Service Providers Identity Providers Athens Resources Registry Athens agents AthensDA Shib SAML Institutional Directory Institutional Data source Bulk Upload Self registration IP Resources Proxies Individual recognition from day one Patron attribution Comprehensive statistics 300 premium content vendors user management tools designed for librarians

4. Athens Agent Resource First Access Athens Authentication Point Athens Authority Server Create SSO session Long Term Token Session Token User signs on with Athens or local authentication Check session token. Get attributes. Session token HTTP refer for authentication Session token Athens Cookie Long Term Token 1 2 4 3 5 6 7 8 9 Athens Single Sign-on

5. Millions of users Worldwide

6. 2000+ institutions

7. Single Sign-on (SSO)

8. Identity Management

9. User Provisioning

10. Management Information - usage statistics - audit

11. Integrates with - Shibboleth - EZproxy - Active Directory - etc

12. Standards Policies Attributes EduPerson

13. Case Study 1

16. Individual Patron id’s – usable anywhere using the student no as patron id Uploaded automatically from student registry No personal data to allay privacy concerns Staff registered manually Next step –Integration with Campus Directory

17. Tamera Hanken says I chose this service because I needed something that would be reliable, easy and quick to implement, and cost effective in terms of equipment and my time. With this method we had to do nothing to enable our network system to use Athens. Based on how easy it was to begin using, how reliable it is, students didn’t find it cumbersome or confusing—we decided to purchase Customer service has been friendly and prompt

18. Case Study 2

24. Tailored self registration Library promotes URL of self registration form Organisational defined info –Campus, role, faculty – whatever Request validated by librarian or IP address Statistics by any defined category Account usable anywhere