Add Shibboleth Login to RCM Add-in
Add Shibboleth / Institutional sign-on / Federated Access to RCM Add-in for Word 2016.
At present Shibboleth / Institutional login is provided via the web interface, but not via the RCM Add-in. The only way to login is with the alternate password option set in RefWorks web user settings.
-
R Milne commented
I don't think this happened in 2020 as planned, is there a revised ETA please?
-
Ivan Masár commented
-
Ivan Masár commented
As a Shibboleth IdP administrator I think this really ought not be implemented.
Shibboleth specifically and intentionally supports only web-based authentication workflow ("The Identity Provider provides Web Single Sign-On capabilities..."). The reason for that is that the user attempting to log in must be able to verify the identity of the login page (domain and certificate). This is not possible in a web view. The web view could easily be a MITM attack.
Therefore the only way to pair the Word add-in with a RefWorks account should be via a generated password/code (whatever we may call it):
1) the user logs in via Shibboleth to the RefWorks web UI
2) the user generates a password/code in the RefWorks web UI
3) the user logs in via this password/code to the Word add-inThis is currently supported in the RCM Add-in.