John, I'm assuming that you want to give access to the Library computers... Which protocols do the librarians want open on those computers? (HTTP, HTTPS, SMTP, SSH, .. all?)
If it's web only, you can use Shibboleth and InCommon and give access to all the connectors in the federation. Additionally you can use Protect Network to provide access to "others". (people might have to create a Protect Network account ahead of time unless you leave a few machines dedicated for that purpose) The federation method has the advantage to move you away from the ID provisioning business and gives granular control using SAML attributes (you can give access to specific resources based on those attributes: e.g access to periodicals for visiting scholars!) It is an upfront investment, especially if you are not yet using Shibboleth. If you don't want to deal with the federation approach, use the Driver License method! (but now you are in the ID provisioning business ;-) Philippe Hanset Univ. of TN On Oct 16, 2011, at 10:31 AM, John Kaftan wrote: We have the ability to do sponsored access via our NAC and have considered it. However, our Librarians feel that the library computers should be open to guests as well. Is anyone offering guest access to those who do not have a computer or wireless device? If so how are you doing that? Thanks John Kaftan Infrastructure Manager Network Engineer Utica College ----- Original Message ----- From: Brian Helman <[email protected]<mailto:[email protected]>> Date: Saturday, October 15, 2011 7:56 pm Subject: Re: [WIRELESS-LAN] Visitor access To: [email protected]<mailto:[email protected]> > From a session I attended last year at the EDUCAUSE Annual Conference, the > methods ranged anywhere from complete open access to timed access charged > against a credit card. > We are setting up a tiered system. Right now, we have just 2 tiers -- every > day users (registered) and unsponsored guests. Anyone who uses the guest > network shares a whopping 1Mbs Internet connection and has a limited set of > applications that can be used (web/ssl, microsoft/apple patching, imap/pop, > dns, dhcp, vpn). If they need more access, they need to request it until we > get our "sponsored guest" tier in place. > -Brian ________________________________ > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > [[email protected]] on behalf of Entwistle, Bruce > [[email protected]] > Sent: Friday, October 14, 2011 11:39 AM > To: > [email protected]<mailto:[email protected]> > Subject: [WIRELESS-LAN] Visitor access > We are having a increasing number of parents and prospective students who are > visiting to tour the campus requesting access to our wireless network. I > was wondering what other schools are doing to accommodate these requests. > Thank you > Bruce Entwistle > Network Manager > University of Redlands > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
