Re: [dspace-tech] Re: Strategies for granting anonymous, uni-affiliated users access to the submission form via Shibboleth

2019-03-19 Thread Tim Donohue
Hi Gabe,

The pieces you'd need on the DSpace-side seem do-able (assuming I'm
understanding your use case properly)

First, you'd need to setup DSpace to use Shibboleth:
https://wiki.duraspace.org/display/DSDOC6x/Authentication+Plugins#AuthenticationPlugins-ShibbolethAuthentication


Second, you'd need to ensure that there's a DSpace Group that all (or some)
of you Shibboleth users are being "mapped" into. You'd need to setup some
form of "Role Based Groups".  They are described in the documentation
above, and the configuration is in this section of the
"authentication-shibboleth.cfg" file:
https://github.com/DSpace/DSpace/blob/dspace-6_x/dspace/config/modules/authentication-shibboleth.cfg#L149

So, for example, using Role Based Groups, you can configure DSpace to look
for anyone who logs into Shibboleth *and* is a member of the "Faculty"
Shibboleth group to be automatically added into a DSpace group named
"Faculty-members" (this group can be named anything).

Once you have all of the above setup, then anyone who logs into DSpace via
Shibboleth should automatically be added to a specific group (only for the
remainder of their logged in session).

Third, you'd add that DSpace group (e.g. "Faculty-members") as a Submitter
rights to a specific Collection in your DSpace.

At this point, you'd likely want to perform some tests. Have a user (who is
a member of the Shibboleth group you mapped) login, and see if they
immediately have submit rights to that Collection.
If they do, then, you just need to provide a direct link to the Submission
form for that Collection (which should be the Collection URL with "/submit"
appended on the end).

In the end, the process should look something like this:
1) User clicks on the Collection submit link, which should look like
https://[url-to-dspace]/handle/[collection-handle]/submit
2) User will be prompted to login via Shibboleth.
3) After logging in, the user will be sent into the submission process for
that Collection in DSpace.
4) If the user cancels the submission, or walks away, they may have to log
back into DSpace (again with their Shibboleth login) to restart the
submission.  But, otherwise, this process should work.

Hopefully that gives you some clues on how to proceed. If you need more
ideas or run into problems, let us know on this list.

Tim


On Tue, Mar 19, 2019 at 9:23 AM  wrote:

> Does anyone have any leads on this?
>
> On Wednesday, March 6, 2019 at 4:18:00 PM UTC-5, tuf0...@temple.edu wrote:
>>
>> Group-
>>
>> At my University we'd like to take users directly from a Shibboleth
>> authentication screen to the first page of the Submission User Interface
>> (pictured in screenshot).  We'd also like to, if possible:
>>
>> --Do this for three separate submission forms, one leading to a 'data'
>> community, one for an 'articles' community, and a third for an 'ETD'
>> community.
>> --Be able to put a 'Submit to our IR!' link on outside webpages.  This
>> will take users to a Shib authentication page, then directly to the
>> Submission user interface
>>
>> What are some workable strategies for doing all this?  Thank you so much
>> for your help!!
>>
>> In other words, we want them to go directly from the Shib login screen to
>> here:
>>
>> [image: Screen Shot 2019-03-06 at 4.10.41 PM.png]
>> Thanks!
>> -Gabe
>>
> --
> All messages to this mailing list should adhere to the DuraSpace Code of
> Conduct: https://duraspace.org/about/policies/code-of-conduct/
> ---
> You received this message because you are subscribed to the Google Groups
> "DSpace Technical Support" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to dspace-tech+unsubscr...@googlegroups.com.
> To post to this group, send email to dspace-tech@googlegroups.com.
> Visit this group at https://groups.google.com/group/dspace-tech.
> For more options, visit https://groups.google.com/d/optout.
>


-- 

Tim Donohue
Technical Lead for DSpace & DSpaceDirect
DuraSpace.org | DSpace.org | DSpaceDirect.org

-- 
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.


[dspace-tech] Re: Strategies for granting anonymous, uni-affiliated users access to the submission form via Shibboleth

2019-03-19 Thread tuf04742
Does anyone have any leads on this?  

On Wednesday, March 6, 2019 at 4:18:00 PM UTC-5, tuf0...@temple.edu wrote:
>
> Group-  
>
> At my University we'd like to take users directly from a Shibboleth 
> authentication screen to the first page of the Submission User Interface 
> (pictured in screenshot).  We'd also like to, if possible:
>
> --Do this for three separate submission forms, one leading to a 'data' 
> community, one for an 'articles' community, and a third for an 'ETD' 
> community.  
> --Be able to put a 'Submit to our IR!' link on outside webpages.  This 
> will take users to a Shib authentication page, then directly to the 
> Submission user interface
>
> What are some workable strategies for doing all this?  Thank you so much 
> for your help!!
>
> In other words, we want them to go directly from the Shib login screen to 
> here:  
>
> [image: Screen Shot 2019-03-06 at 4.10.41 PM.png]
> Thanks!
> -Gabe
>

-- 
All messages to this mailing list should adhere to the DuraSpace Code of 
Conduct: https://duraspace.org/about/policies/code-of-conduct/
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To post to this group, send email to dspace-tech@googlegroups.com.
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.