OpenAthens Local Authentication (OpenAthens LA, or OALA) enables your users to access resources in a federation environment. It interacts with your local data repository and authentication systems to facilitate access to online resources by your end users. In SAML terms OpenAthens LA is an Identity Provider (IdP).
The Administration Console is a browser based application that enables your administrators to configure how users are authenticated, where to retrieve user data from, the federations you connect to and what information about your users is shared with Service Providers. It The Administration Console publishes the configuration to the runtime and also provides graphical a view of statistics, logs and diagnostic tools. Typically user User data would typically be retrieved from an Active Directory or other LDAP server, but OpenAthens LA can easily be configured to use other sources such as relational databases or student registration systems.
The Runtime and Administration Console components are linked by a published configuration; in effect, the Administration Console tells the Runtime how to behave.
OpenAthens LA should work with any federationOpenAthens LA works with many federations, including:
- UK Access Management Federation (UKAMF) (United Kingdom)
- eduID.cz (Czech federation)
- GakuNin (Japan)
- DFN-AAI (Germany)
- RENATER (France)
- SWITCHaai (Switzerland)