<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle21
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Just an update – we had an expired certificate in our Azure (SAML) Integration profile. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The fix was easy once Chris from CARLI helped us identify the problem.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">We have been using SAML for Alma /PVE for 3 years and the expiry date fell on Saturday and our IT did not have an advance notification set up for this app within Azure like they usually have for other apps so
this fell through the cracks. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">If you use SAML, you may want to check the expiry date on your SAML integration profile and make sure to replace a signed certificate before the current one expires. See instructions from ExL at
<a href="https://urldefense.com/v3/__https://knowledge.exlibrisgroup.com/Alma/Product_Documentation/010Alma_Online_Help_(English)/090Integrations_with_External_Systems/060Authentication/020SAML-Based_Single_Sign-On_Sign-Off__;!!DZ3fjg!97xWdfoU2db3u6dXjFuk8_A1gjwxA52ubNN65G8hPMLebKpXAGPPpHquxiVXJZvEcjwGDyLcUesYC0ha0ygjge9h$">
https://knowledge.exlibrisgroup.com/Alma/Product_Documentation/010Alma_Online_Help_(English)/090Integrations_with_External_Systems/060Authentication/020SAML-Based_Single_Sign-On_Sign-Off</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">PS: A named user account with admin privileges was a lifesaver for us in this situation.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Andrea<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Imre, Andrea <br>
<b>Sent:</b> Saturday, September 16, 2023 8:15 PM<br>
<b>To:</b> ermcommittee@carli.illinois.edu<br>
<b>Subject:</b> Anyone else experiencing issues with Alma/Primo VE SAML login<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi, <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have started to experience issues with our SAML (Azure) login this afternoon. SAML works for other library resources and for other campus services. Only Alma and Primo VE are affected and strangely the login process goes like normal,
we enter our credentials, we are authenticated by Azure (SAML) but then Primo VE displays a weird message we have not seen before.
<o:p></o:p></p>
<p class="MsoNormal">Nothing was changed in our integration profile. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Primo gives us this error: see yellow bar running across screen:
<a href="https://urldefense.com/v3/__https://app.screencast.com/my984LeHgzpot__;!!DZ3fjg!97xWdfoU2db3u6dXjFuk8_A1gjwxA52ubNN65G8hPMLebKpXAGPPpHquxiVXJZvEcjwGDyLcUesYC0ha05v2k6WR$">https://app.screencast.com/my984LeHgzpot</a> <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Alma gives us this error: <a href="https://urldefense.com/v3/__https://app.screencast.com/ULsEfrV8eef6q__;!!DZ3fjg!97xWdfoU2db3u6dXjFuk8_A1gjwxA52ubNN65G8hPMLebKpXAGPPpHquxiVXJZvEcjwGDyLcUesYC0ha00DUoZSX$">
https://app.screencast.com/ULsEfrV8eef6q</a> <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Anyone else relying on SAML having any issues or is it just us?
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Andrea<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">********************************<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Andrea Imre<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Associate Professor<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Electronic Resources Librarian<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Southern Illinois University Carbondale<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Morris Library - MC6632<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">605 Agriculture Dr<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Carbondale, IL 62901<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">phone: 618-453-4339<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">fax: 618-453-3452<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">e-mail: <a href="mailto:aimre@lib.siu.edu">
<span style="color:blue">aimre@lib.siu.edu</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>