[Archivesspace_Users_Group] Multi-factor authentication and ASpace

[Christine Di Bella]

Dear Olivia,

ArchivesSpace supports LDAP (see http://archivesspace.github.io/archivesspace/user/configuring-ldap-authentication/) and recently Mark Cooper of LYRASIS developed a plugin for people interested in supporting some other kinds of authentication, which is available at https://github.com/lyrasis/aspace-oauth. We can help your tech people with either of those through a support ticket if you email us at ArchivesSpaceHome at lyrasis.org<mailto:ArchivesSpaceHome at lyrasis.org> when you get to that point.

We’ve also heard of institutions using or wanting to use things like Shibboleth (Mark Cooper’s plugin will also facilitate that) who have created their own plugins or custom deployments. People on the list would know more about those kinds of solutions if they’ve been implemented at their own institutions.

Christine

Christine Di Bella
ArchivesSpace Program Manager
christine.dibella at lyrasis.org<mailto:christine.dibella at lyrasis.org>
800.999.8558 x2905
678-235-2905
cdibella13 (Skype)

[ASpaceOrgHomeMedium]



From: archivesspace_users_group-bounces at lyralists.lyrasis.org [mailto:archivesspace_users_group-bounces at lyralists.lyrasis.org] On Behalf Of Olivia S Solis
Sent: Monday, December 4, 2017 12:37 PM
To: Archivesspace Users Group <archivesspace_users_group at lyralists.lyrasis.org>
Subject: [Archivesspace_Users_Group] Multi-factor authentication and ASpace

Hello all,

So we are setting up our web-hosted instance of ASpace. Thus far we have been utilizing a secure VM that we have to tunnel into while we migrate all of our legacy data into the system. We want to set up a two-factor authentication system in our web-hosted version of the staff interface as we have a lot of sensitive donor data in the system. Our the service provider for our web-hosted version is inquiring as to the technologies ASpace uses to support authentication... LDAP, OAuth, or PAM. From our provider, "if it supports PAM then I’m pretty confident we have an easy path to supporting two-factor authentication, if not we have to get into the OAuth realm which I don’t think is straightforward yet, but we have folks around here with more expertise."

This is foreign territory for me so I'm directly quoting our contact. We've looked a bit at the documentation, but haven't found the information we are looking for. Does anyone have experience with multi-factor authentication and ASpace? If so, what mechanism did you use (technology and MFA provider)?

Thanks!
Olivia

--
Olivia Solis, MSIS
Metadata Coordinator
Dolph Briscoe Center for American History
The University of Texas at Austin
2300 Red River St. Stop D1100
Austin TX, 78712-1426
(512) 232-8013
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lyralists.lyrasis.org/pipermail/archivesspace_users_group/attachments/20171207/1bb1367c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 6608 bytes
Desc: image003.jpg
URL: <http://lyralists.lyrasis.org/pipermail/archivesspace_users_group/attachments/20171207/1bb1367c/attachment.jpg>