Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. (Suggestion from Scott Cantor) EZProxy should redirect the user to a SessionInitiator at the SP along with a parameter telling it which IdP to use, and a parameter containing the deep link url. This will bypass all WAYF processing, and return . The SP will use the Federation metadata to choose an appropriate protocol to use when comunicationg with the user's campus IdP. The SP will then redirect the browser user to their IdP for authn, and then return them to authentication, passing along the deep link as the eventual target.

(From Chris Zagar: A release of EZproxy coming this summer adds the ability to dynamically alter "starting point URLs", which are URLs that look likeIf the deep link url looked like this: (yes, I know this isn't an OpenURL style url, but its what I have):

http://ezproxysearch.yourlibebscohost.orgcom/login.aspx?direct=true&db=f5h&AN=21033587&site=ehost-liveImage Added

it would be transformed by EZProxy to:

http://search.ebscohost.com/Login?providerId=urn:mace:incommon:osu.edu&target?url=http://wwwsearch.somedbebscohost.com/Image Removed

allowing regular expression changes to be applied. That facility will include the ability to alter a URL which could easily include rerouting it into the local IdP. This brings in the possibility of changing the URLs to add in any hints that might be needed on the receiving vendor side for the URL, but that might not be reflected in SFX.

login.aspx?direct=true&db=f5h&AN=21033587&site=ehost-liveImage Added

  1. If the user has previously authenticated, then they are immediately redirected back to the "deep link" target. If they have not yet authenticated, then the normal authentication process proceeds, and they are then redirected back to the deep link url.

(From Chris Zagar: A release of EZproxy coming this summer adds the ability tomake this transformation.Any change you could suggest some before-after versions of edge case URLs for consideration so I can insure that they would be covered?)

  1. If the resource does appear in EZproxy's configuration, then EZProxy redirects the browser to the "proxy" component of EZProxy.

...