Skip to content

Support other (SAML) OpenAthens auth flows #602

Description

@adomasven

We got support in for the login flow of OpenAthens that goes via the go.openathens.net redirector url.

I was under the impression, that all login flows go via this URL, and if we capture that, we will capture every OpenAthens user and they will get automatic proxy redirection support

However, after testing, it seems that there are other flows that don't go via go.openathens.net, report: https://forums.zotero.org/discussion/comment/508273/#Comment_508273

Particularly, journals.aps.org seems to use either Evergreen ILS or OpenID Connect for OpenAthens, and that login flow goes via:

  • connect.openathens.net
  • wayfinder.openathens.net
  • The institution's identity provider's domain

We need to get confirmation from OpenAthens developers whether we can use the this login flow and URL parameters to create a different kind of OpenAthens proxy (SAML) support, and support the same kind of automatic redirection that we have for other types of proxies that use URL-rewriting via redirectors.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions