- Libraries now grant access to many online resources (e.g. publishers)
- Previously libraries used IP based authentication (often through "easyProxy"), this is still the case for most places but Federated SSO use is increasing
- Believes libraries can play an important role in managing identities
- Something libraries already do
- A library should be a trusted place to study, including sensitive topics (this is equally valid online)
- Established the FIM4L initiative around privacy for online library use
- Libraries want to uphold principal of freedom of research
- Don't want to give all the data to the publishers
- fim4l.org, FIM4L is a working group in LIBER. Very few people but much interest.
- Priority to come to a consensus on library policy for federated authentication that protects users identities
- More and more libraries are joining the mailing list and working groups
- Some publishers are shutting down IP based authorisation (some tried and rolled back)
- First FIM4L document published and endorsed
- Want users to have a choice in how much data is shared with publishers, many users prefer persistent identifiers (but only persistent for a single SP)
- Publishers do not have to know who the library patrons are
- Relationship with publishers via contracts, identity model must be included
- Comment from Nicole: eduGAIN will be rolling out the pseudonymous identifiers
- Comment from Adam: There are different libraries all around the world with different budgets and service providers have vastly different pricing models. So there are some libraries that don't have site-wide licenses (all users) and purchase stuff for specific campuses or partner colleges, or departments etc. Service providers are the party that needs to authorize access to their services and using federated access, those authorization rules can usually be setup using pseudonymous data. e.g. scoped affiliation or entitlement