Shibboleth & Open Athens

Institutional Login

Credo Reference supports two Single Sign On (SSO) options that allows the customer institution to manage their own user authentication.

1. Shibboleth

Shibboleth is a standard SSO solution developed by Internet2. Credo customers who have a Shibboleth 'Identity Provider' (IdP) server (or who use an out-sourced Identity Provider) can connect their users to Credo Reference through their IdP.

Configuring Shibboleth

Credo Reference supports attribute eduPersonScopedAffiliation as a login identifier. To make this work, the domain name used on these attributes must match the domain name Credo Reference has assigned to your account. Please contact Credo Reference support to let us know what domain name is used by your IdP's attribute release policy.

Credo Reference also supports your IdP's Identity Provider Entity ID as a login identifier. To make this work, please contact Credo Reference support to let us know your IdP's Entity ID. This entity ID must be used only by users from one institution. IdPs that are shared by multiple institutions cannot use this login identifier.

Logging In

There are two ways to login via Shibboleth.

  1. The user can find their institution on our "Where are you from?" page. 
  2. By using the URL format below, often known as a WAYFless URL, your users can be directed straight to your IdP without having to select it from the Discovery Service list of institutions. To create it, you'll need to know the entityId of your IdP and add it to the end of the URL. The basic format is as follows:

    https://api.credoreference.com/api/v1/oauth/authorize?response_type=code&login_type=shibboleth&client_id=login&redirect_uri=https%3A%2F%2Fsearch.credoreference.com%2Fauth%2Fcode&entityID=URL-encoded-IdP-entity-ID

Make sure to encode your entity ID; here's one popular tool for doing so. If you need help, just contact support@credoreference.com.

2. Open Athens

Higher Education institutions in the UK can offer access to students offsite using Open Athens Authentication. Credo Reference supports Athens' single-password sign-in, so that once logged into one Athens resource, remote users are logged into all their resources during their session.

UK students can login into Credo Reference with an Athens username and password by logging in through their institution's MyAthens account, or by finding their institution on our "Where are you from?" page. We can also create a WAYFless URL for your institution. 

Athens is a popular standard for handling user authentication in higher educational establishments and is provided by EduServ.

Have a question or feedback about this answer?

Click here to submit a support request or click here to access the Community page and post your question or comment.

Powered by Zendesk