The UK federation has developed a Shibboleth IdP extension which lets the identity provider (most commonly an institution) release an attribute which is dependent on the user's IP address. So, for example, the IdP could release an entitlement indicating that a student was logging in from the campus network.
This allows the user's IP address to be used to be matched against policy rules to inform service providers (most commonly publishers) about the user's network location.
An example of how this could be used would be where a license has different terms for on-site and home use. The "user agent attribute" could then be used to define which locations were permissible for a particular use case. In the context of a resource that had terms in its license that meant it should only be access when supervised by a teacher (in a schools context), it would allow the resource provider to prevent a user accessing the content when outside a school.
The UK federation has developed this extension with the schools sector in mind, however if you think it would help your own situation or just want to know more, please contact us or click the link below
http://www.ukfederation.org.uk/content/News/2012-07-05-UAA
Many thanks
Mark
Mark Williams
Operator Manager
UK Access Management Federation
JISC Collections
Brettenham House
5 Lancaster Place
London
WC2E 7EN
T: 02030066042 (Direct)
T: 02030066086 (Federation Support)
E: [log in to unmask]<mailto:[log in to unmask]>
lis-e-resources is a UKSG list - http://www.uksg.org/serials
UKSG groups also available on Facebook and LinkedIn
|