<!DOCTYPE html><html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
Dear Andrew et al,<br>
<br>
We've been thinking about this in Oxford, and it would be extremely
useful to have OIDC, or some other way of allowing users to log in
with their institutional credentials, rather than issuing and
managing user accounts ourselves. <br>
<br>
I did get Shibboleth working in the past with BNCweb (for the
benefit of other listeners, BNCweb is a modified version of CQPweb)
in the past, and, once we had the server set up and registered as a
Shibboleth service provider, with the relevant keys and certificates
in place it was only a matter of changing the apache configuration
to require Shibboleth authentication to access the BNCweb
application. It appears that OIDC is a preferred way to do this
nowadays, rather than native Shibboleth.<br>
<br>
I discussed this briefly with technical folks in the CLARIN research
infrastructure, who recommended OIDC as a solution, but I also don't
know enough about how to implement it without looking into it
further. I do know that as well as the technical setup, you'd need
to register with the UK Federation as a trusted Shibboleth service
provider, which would probably involve going through your
institutional contact in IT Services in your university, but
shouldn't be too onerous.<br>
<br>
There are a number of online services which use shibboleth-based
login (you can see a list at
<a class="moz-txt-link-freetext" href="https://www.clarin.eu/content/easy-access-protected-resources">https://www.clarin.eu/content/easy-access-protected-resources</a>) but
as far as I can see, none of them are instances of CQPweb, and I
can't tell if they use OICD.<br>
<br>
I'd be interested in taking this further and getting more advice on
how to implement OIDC and how to make it work with CQPweb, and could
ask CLARIN experts in this domain to help.<br>
<br>
Best wishes,<br>
Martin<br>
<br>
<div class="moz-cite-prefix">On 27/06/2024 04:52, Hardie, Andrew
wrote:<br>
</div>
<blockquote type="cite" cite="mid:LO4P265MB3485CA73B3108947331B0611CBCE2@LO4P265MB3485.GBRP265.PROD.OUTLOOK.COM">
<style type="text/css" style="display:none;">P {margin-top:0;margin-bottom:0;}</style>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Verdana, sans-serif; font-size: 10pt; color: rgb(31, 73, 125);">Speaking
only for myself, I don’t understand enough about OIDC
authentication to say whether or not this is possible – I
certainly couldn’t implement it without a lot of work learning
about it.</span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Verdana, sans-serif; font-size: 10pt; color: rgb(31, 73, 125);"> </span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Verdana, sans-serif; font-size: 10pt; color: rgb(31, 73, 125);">What
do others think – is this a necessary feature, or not?</span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Verdana, sans-serif; font-size: 10pt; color: rgb(31, 73, 125);"> </span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Verdana, sans-serif; font-size: 10pt; color: rgb(31, 73, 125);">best</span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Verdana, sans-serif; font-size: 10pt; color: rgb(31, 73, 125);"> </span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Verdana, sans-serif; font-size: 10pt; color: rgb(31, 73, 125);">Andrew.</span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Verdana, sans-serif; font-size: 10pt; color: rgb(31, 73, 125);"> </span></p>
<div style="padding: 3pt 0cm 0cm; border-top: 1pt solid rgb(225, 225, 225);">
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Calibri, sans-serif; font-size: 11pt;"><b>From:</b> <a class="moz-txt-link-abbreviated" href="mailto:cwb-bounces@sslmit.unibo.it">cwb-bounces@sslmit.unibo.it</a>
<a class="moz-txt-link-rfc2396E" href="mailto:cwb-bounces@sslmit.unibo.it"><cwb-bounces@sslmit.unibo.it></a>
<b>On Behalf Of </b>???<br>
<b>Sent:</b> Friday, June 14, 2024 9:46 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:cwb@sslmit.unibo.it">cwb@sslmit.unibo.it</a><br>
<b>Subject:</b> [CWB] Support OIDC authentication, please</span></p>
</div>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"> </p>
<p><span style="font-family: Arial, sans-serif; font-size: 10.5pt; color: black;">Thus,
we can integrate CQPweb with other systems.</span></p>
<p style="margin: 0cm 0cm 12pt; font-family: Aptos, sans-serif; font-size: 12pt;">
<span style="font-family: Arial, sans-serif; font-size: 10.5pt; color: black;"><br>
<br>
<br>
<br>
</span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Arial, sans-serif; font-size: 10.5pt; color: black;">---------</span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"><span style="font-family: Arial, sans-serif; font-size: 10.5pt; color: black;">Vincent</span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 12pt;"> </p>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
CWB mailing list
<a class="moz-txt-link-abbreviated" href="mailto:CWB@sslmit.unibo.it">CWB@sslmit.unibo.it</a>
<a class="moz-txt-link-freetext" href="http://liste.sslmit.unibo.it/mailman/listinfo/cwb">http://liste.sslmit.unibo.it/mailman/listinfo/cwb</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Senior Researcher in Corpus Linguistics
Faculty of Linguistics, Philology and Phonetics, University of Oxford
National Co-ordinator, CLARIN-UK
<a class="moz-txt-link-abbreviated" href="mailto:martin.wynne@ling-phil.ox.ac.uk">martin.wynne@ling-phil.ox.ac.uk</a>
<a class="moz-txt-link-freetext" href="https://orcid.org/0000-0002-4155-0530">https://orcid.org/0000-0002-4155-0530</a></pre>
</body>
</html>