Secure Authentication Tokens using EZproxy

EZproxy version 2.2a or later (http://www.usefulutilities.com/) contains support for Books24x7 secure authentication tokens. This document describes the required configuration.

Secure Authentication Tokens allow anonymous credentialed access to Books24x7. EZproxy prepares a link to Books24x7 for each user, which includes encrypted data used to establish a session on Books24x7. This process does not disclose the identity of the EZproxy user to Books24x7. It sends an encrypted string (authentication token), which identifies each user uniquely. If necessary, Books24x7 can provide the library with this authentication token, which the library can then cross-reference to the original user using http://ezproxy.yourlib.org:2048/token

Note: Even though EZproxy does not normally support Referring URLs the internal support for Books24x7 Authentication Tokens does allow for an administration-free approach to integrating authentication token support for Books24x7. Furthermore, since EZproxy supports a more complete version of tokens (secure authentication tokens), it does not require establishment of referring URL rules.

Set-up process

1. Read and fully review these instructions.
2. Contact Skillsoft's Library Support Team by sending an email to: library@books24x7.com to obtain the SiteID and TokenSigKey.
3. Confirm with the Library Support Team the the set-up is working properly.
4. Launch full access.

Configuration Example

The EZproxy configuration must contain a block of parameters as shown below:

• Books24x7Site is a site identifier issued to the library by Books24x7.
• TokenKey is a random alphanumeric string that you pick that is used to encrypt the username of the person accessing EZproxy before sending it to Books24x7. [Note: this value cannot be changed once the configuration is complete.]
• TokenSignatureKey is used to encrypt the information sent to Books24x7. You must obtain this from Books24x7.
• URL is the portal entry point to Books24x7. This URL is the only supported entry point, which will properly interpret the encrypted authentication tokens provided by EZproxy.

Books24x7 must configure each library’s subscription for use with EZproxy Authentication Tokens. When a library requests such a configuration, Books24x7 provides them a TokenSignatureKey, which they enter in their EZproxy configuration as shown above. The library should also confirm that they have correctly entered their Books24x7Site code parameter.

In order for users to be successfully authenticated by Book24x7 using EZproxy secure token, they must only enter Books24x7 from the URL specified in the configuration file for EZProxy. Failure to do so will result in access denials.

Troubleshooting

Type in the following URL after you have attempted to access the service:
http://library.books24x7.com/diagnostics.asp

Make note of the referring URL and the IP that is displayed. Also make note of the site code being shown and confirm that it does correspond to the one provided to you by Books24x7.

http://library.books24x7.com/library.asp?^B&debug=1

This will prevent the library.asp from automatically redirecting the user to the first viewable page past the access portal. Display information, which is useful during the setup phase, will be displayed instead - including a link to the first viewable page.