Overview
A Single-Sign-On (SSO) authentication system allows a student to have a single set of login credentials to sign them into multiple softwares/applications
Security Assertion Marked up Language (SAML) is the open standard that allows identity providers (IdP) to pass authorization credentials to service providers
Introductory Video
Video Explainer
BibliU's Metadata
You can find BibliU's metadata details here:
https://bibliu.com/Shibboleth.sso/Metadata
In general, BibliU can quickly and easily configure the institution's Single Sign On environment.
Required Attributes
EntityID
A globally unique name for an Identity Provider.
https://idp.<institutionname>.ac.uk/shibboleth
entryPoint
The endpoint that is dedicated to handling SAML transactions.
Where BibliU should send a user to log into the Identity Provider's SSO environment.
staticField
The attribute we can use to uniquely and non-transiently identify users.
e.g. urn:oid:0.9.2342.19200300.100.1.3 = email
urn:oid:1.3.6.1.4.1.5923.1.1.1.10 = eduPersonTargetedID
Certificate
The signing certificate used to encrypt/decrypt user authentication.
Static ID
BibliU can define any attribute passed by an IdP to be used as the static identifier of the user. Our preference for user identification is:
- Student Email address
- Non-transient unique identifier (e.g. Should remain constant between sessions)
BibliU does not support transient unique identifiers. The motivation for this is that users should be able to synchronise their annotations between sessions, and thus we need something that will identify a user consistently.
Learning Management Systems / Virtual Learning Environment Coordination
It is preferred that the unique identifier used in a Single Sign On environment matches the unique identifier shared by your institution's LTI identifier. This allows students to login through either system seamlessly.
Log-out Callbacks
BibliU does not support authentication endpoints for signing users out of their Single Sign On session.
Entity ID
For most institutions the default callback URL is:
https://bibliotech.education/entity
Callback URL/Reply URL
For most institutions the default callback URL is:
https://bibliu.com/users/samlcallback
Need help?
If you need further assistance you can reach out to our support team through the following:
- Help button on this page
- Submit a ticket through Submit a Request
- Email us at support@bibliu.com
- Visit our BibliU Help Center