[wactclc-alma] ALMA login URLs and security certificate update

[Abby Koehler]

Hi Laurie,
I've been trying to learn what the announcement means for our own setup, and I came across this language:

Alma supports the SAML 2.0 Web Browser SSO profile. This enables Alma to exchange authentication and authorization information, allowing a user to sign in or out of an external system and be automatically signed in or out of Alma, or vice versa.

Following Alma profile activation and third-party configuration, your institution's support staff changes the Alma login shortcut to the following URL (see Your Alma Domain Names<https://knowledge.exlibrisgroup.com/Alma/Product_Documentation/010Alma_Online_Help_(English)/010Getting_Started/050Alma_User_Interface_%E2%80%93_General_Information/030Logging_Into_and_Out_of_the_User_Interface#Your_Alma_Domain_Names>): https://<Alma<https://%3cAlma> domain>/SAML.

For a detailed overview of SAML-based SSO, see https://developers.exlibrisgroup.com/alma/integrations/user-management/authentication/inst_idp/saml.
>From SAML-Based Single Sign On<https://knowledge.exlibrisgroup.com/Alma/Product_Documentation/010Alma_Online_Help_(English)/090Integrations_with_External_Systems/060Authentication/020SAML-Based_Single_Sign-On_Sign-Off#Replacing_an_IdP_Signing_Certificate>

-----------

I am still a little fuzzy on the process. I think there's an Alma metadata file in the Integration profile that needs to be updated away from the DigitCert version if you're using it. We aren't, but I don't know if that's (going to be) a problem...?

I think I do know that if the IdP certificate at our institution changes, I have to upload it and it's metadata into Alma. I think.

abby koehler
she/her/hers
Faculty Systems Librarian
Whatcom Community College
Book a meeting with me<https://outlook.office365.com/owa/calendar/abby1@whatcomccedu.onmicrosoft.com/bookings/>

From: wactclc-alma <wactclc-alma-bounces at lists.ctc.edu> On Behalf Of Laurie Shuster
Sent: Thursday, June 1, 2023 6:00 PM
To: wactclc-alma at lists.ctc.edu
Subject: [wactclc-alma] ALMA login URLs and security certificate update


CAUTION: This email originated from outside your organization. Exercise caution when opening attachments or clicking links, especially from unknown senders.



Hi Group!  We have a couple of different URLs to log into Alma.  Some start with sbctc and others start with adfs and our Pierce URL.  For example:

https://sbctc-piercecollege.alma.exlibrisgroup.com/....

Vs

https://adfs.pierce.ctc.edu/adfs?...

Three questions:


  1.  We're trying to figure out why some route through SBCTC.  Our backup admin account goes through SBCTC - which makes total sense.  But... not sure about the others.  Does going through SBCTC have some kind of advantage? Which do you all use - SBCTC or local URL?
  2.  With the SAML update - We've alerted our IT to the changes.  Do we need to do anything about the SBCTC urls? Or does the State Board take care of that?
  3.  Is anyone aware of other things we might need to do about the certificate update? https://knowledge.exlibrisgroup.com/Alma/Release_Notes/2023/Alma_2023_Release_Notes?mon=202304BASE

Thank you!

Laurie

Laurie Shuster
Reference & Instruction Librarian
Pierce College
253-964-6305
lshuster at pierce.ctc.edu<mailto:lshuster at pierce.ctc.edu>
Pronouns: she/her

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20230606/fc801a09/attachment.html>