View source for Private User Remote Access (Pura)

{{Languages}}

Pura ('''P'''rivate '''U'''ser '''R'''emote '''A'''ccess) is a service offered by swissbib that allows private users from libraries to access online resources using a [https://projects.switch.ch/eduid/ SWITCH edu-ID] account. Every library can manage its own users and grant access to its online collections. The private users can then access online resources not only from within the library but also from anywhere else.

==Basic Workflow==

The basic workflow is the following :
# If he doesn't have a SWITCH edu-ID account, the private user must [https://eduid.ch/web/registration/?providerId=https%3A%2F%2Fwww.swissbib.ch%2Fshibboleth&target=https%3A%2F%2Flogin.eduid.ch%2Fidp%2Fprofile%2FSAML2%2FUnsolicited%2FSSO%3FproviderId%3Dhttps%253A%252F%252Fwww.swissbib.ch%252Fshibboleth%26target%3Dhttps%253A%252F%252Fwww.swissbib.ch%252FMyResearch%252FPura%252Flibrary%252FZ01 create a SWITCH edu-ID account].
# He can then [https://login.eduid.ch/idp/profile/SAML2/Unsolicited/SSO?providerId=https%3A%2F%2Fwww.swissbib.ch%2Fshibboleth&target=https%3A%2F%2Fwww.swissbib.ch%2FMyResearch%2FPura register online] for the Pura Service for his library : 
# After the registration, the user gets a confirmation that he must show at the library desk along with his library card. The library staff activates the user if the user meets the library requirements. Every library can decide what are its rules (for example the user must have a library account, the user must live in a specific state, the user must sign some special terms of use, ...)
# The user can access the online resources directly using his SWITCH edu-ID credentials. This is a standard Shibboleth login, which often described as "Sign in via your institution" on the publisher's platforms. [https://fsso.springer.com/federation/init?entityId=https://eduid.ch/idp/shibboleth&returnUrl=https://link.springer.com/10.1007/s00784-012-0813-2 Example].

==Workflow in Images==

<div><ul> 
<li style="display: inline-block;"> [[File:Switch-edu-id-account-creation.png|thumb|200px|1. Create SWITCH edu-ID account|link={{filepath:Switch-edu-id-account-creation.png}}]]
<li style="display: inline-block;"> [[File:Pura-registration.png|thumb|200px|2. Register for the Pura service on swissbib.ch website|link={{filepath:Pura-registration.png}}]]
<li style="display: inline-block;"> [[File:Zentralbibliothek-zurich.jpeg|thumb|200px|3. Go to the library desk with the barcode|link={{filepath:Zentralbibliothek-zurich.jpeg}}]]
<li style="display: inline-block;"> [[File:Pura-activation.png|thumb|200px|4. Library staff activate the account inside the library|link={{filepath:Pura-activation.png}}]]
<li style="display: inline-block;"> [[File:Publisher-login.png|thumb|200px|5. Access licensed content|link={{filepath:Publisher-login.png}}]]
</ul></div>

==Pura Information for Libraries==

Any library in Switzerland can use the Pura Service. If you are interested, please [mailto:swissbib-ub@unibas.ch contact us].

Here are some advantages :
* No need to install any special software (proxy or other software) at the library
* No IT skills needed at the library
* The library can choose their own rules for their own user
* The SWITCH edu-ID login is secure and will gain more and more usage in the future, as the swiss universities are migrating to the SWITCH edu-ID login. It is maintained by SWITCH which has been a trusted organization for years.
* If the library offer other services where a login is needed (computers, printing, ...) and these services are compatible with the service provider requirements, your users can use the same login.

Here are some disadvantages :
* The requirements for the publishers are quite strict. If the publisher you want to offer is unable to cope with Shibboleth authentication, you won't be able to offer it, unless you setup a proxy where you requires a SWITCH edu-ID authentication.

The following platforms are already Pura compatible
* Munzinger
* MGG Online
* Proquest Databases
* Swiss National Licences (De Gruyter, Cambridge University Press, Oxford University Press, Springer Nature)
* nanoo.tv

Price for this service :
* Set-up fee when the library starts to use the Pura service : 2400 CHF. This amount is mainly meant for the Pura setup done by swissbib and all the initial meetings and configurations.
* Yearly fee to use the Pura service : 4900 CHF. This includes : adding new publishers to pura, swissbib support and infrastructure, SWITCH support and infrastructure and some "royalties" to the ZB for their initial investment in the project.

'''Note''' : 
* the library needs to check its contracts to make sure that they allow the library to offer content to their private users remotely

==Pura Information for Publishers==

===Requirements for Publishers===
Here are the technical requirements on the publisher side :

* The service provider supports authentication via Shibboleth
* Access to the service must be possible via the SAML2 protocol (not SAML1)
* At least, the service provider must be able to check whether the SAML attribute <code>eduPersonEntitlement</code> has the value <code>urn:mace:dir:entitlement:common-lib-terms</code> to grant access. If the service provider is able to cope with various values for various libraries for this attribute, this is even better.
* The service provider must be SWITCHaai Federation Partner (interfederation is not enough). 
** See the [https://www.switch.ch/aai/participants/partners/ list of SWITCHaai Federation Partners]
** [https://www.switch.ch/aai/join/partners/ Join the SWITCHaai Federation] as a Service Provider.

To have a better user experience : 

* The service provider supports [https://www.ukfederation.org.uk/library/uploads/Documents/WAYFlessGuidance.pdf SP-side WAYFLess URL's]

===Configuration at the Publisher side===

The publisher needs to configure the SWITCH edu-ID Identity Provider.

* the entityID is <code>https://eduid.ch/idp/shibboleth</code>
* [https://www.switch.ch/aai/participants/allhomeorgs-expert/#eduid.ch Details]

The publisher needs to require the <code>eduPersonEntitlement</code> attribute. For this, the publisher might need to update his registration in the [https://rr.aai.switch.ch SWITCH Resource Registry].

<div><ul> 
<li style="display: inline-block;"> [[File:Switch-resource-registry.png|thumb|200px|Require eduPersonEntitlement from SWITCH|link={{filepath:Switch-resource-registry.png}}]]</li>
</ul></div>

We can provide a test login if you need it.

Regarding the value of the <code>eduPersonEntitlement</code>, there are two options for the publisher.

==== Option 1 : ISIL code of the library ====

As an the <code>eduPersonEntitlement</code> value, we will deliver the [https://en.wikipedia.org/wiki/International_Standard_Identifier_for_Libraries_and_Related_Organizations ISIL code] of the library in the following form (example for Zentralbibliothek Zürich) <code>http://isil.ch/CH-000008-6</code>. This way, the publisher can map the user to a specific licence.

==== Option 2 : common-lib-terms ====

If the publisher licences the same product for all Pura Libraries (for example databases or dictionaries) and the publisher software isn't able to cope with various eduPersonEntitlement values, we can send the standard value [https://www.internet2.edu/products-services/trust-identity/mace-registries/urnmace-namespace/urn-mace-dir-registry/urn-mace-dir-entitlement/ urn:mace:dir:entitlement:common-lib-terms]. This way, the publisher cannot map the user to a specific library licence, but it can map all Pura users to one Pura Library licence (for example the first one that uses this product within the Pura service).

==Technical Information==

The software developed for this project is available open source on Github : 

* [https://github.com/swissbib/pura-backend User management]
* [https://github.com/swissbib/switchSharedAttributesAPIClient Communication with Switch edu-ID infrastructure]

[[Members:Pura_Documentation|Internal documentation]] (access restricted for now)

==General information==

This service has been launched in June 2018. This is the result of a collaboration between the Zentralbibliothek Zürich, SWITCH and the swissbib team. The Zentralbibliothek is the first library to use this service. You can have a look at the [https://www.zb.uzh.ch/recherche/e-ressourcen/remoteaccess/index.html.de Pura page on ZB website] to learn more.

The service has also been presented at Swiss Library Congress 2018 in Montreux ([http://www.swissbib.org/wiki/img_auth.php/5/51/PRAE_BIS2018_PURA_20180830_lio.pdf see the Slides]) and at the Annual Meeting of the Swiss Cantonal Libraries 2018 in Basel ([http://www.swissbib.org/wiki/img_auth.php/7/78/PRAE_SKKB2018_PURA_20180911_bma.pdf see the Slides in German]]).
A further presentation was held in November 2018 at the [https://www.fhnw.ch/de/die-fhnw/bibliotheken/bibliothek-brugg-windisch/aktuelles/tagung-hot-topics-for-librarians Annual Meeting of the Libraries of the Universities of Applied Sciences] (Slides in [http://www.swissbib.org/wiki/img_auth.php/d/d1/PRAE_FH2018_PURA_DE_20181114_ext.pdf German] and [http://www.swissbib.org/wiki/img_auth.php/4/4a/PRAE_FH2018_PURA_FR_20181114_ext.pdf French]).

==Contact==

For more information, feel free to contact us at [mailto:swissbib-ub@unibas.ch <nowiki>swissbib-ub [at] unibas [dot] ch</nowiki>].