[ODLC] Fwd: FW: Time-sensitive update to SAML security certificate for user authentication

[ODLC Executive Committee]

Hello ODLC Members,



*Time sensitive and possible service disruption* – please read below for
complete details. To briefly summarize, Overdrive is working to update the
SAML certificate. If your library uses SAML authentication (instead of SIP2
authentication), you may need to prepare for changes.



On May 23, 2023 from 8am-4:30pm, you can test your Libby login to see if
there are issues. If you need assistance, you'll want to contact Overdrive
via the Authentication Support form on the Support tab in OverDrive
Marketplace <https://marketplace.overdrive.com/Support>.


Please confirm at your libraries to avoid service disruptions.

Kind regards,
Carrie Schindele-Cupples, ODLC Chair



*From:* Anthony Bilancini <abilancini at overdrive.com>
*Sent:* Wednesday, May 17, 2023 7:36 AM
*To:* SCHINDELE-CUPPLES Carrie <scupples at springfield-or.gov>;
kwiley at cityofroseburg.org
*Subject:* Time-sensitive update to SAML security certificate for user
authentication



**| WARNING: This email originated from outside of your organization.
Please do not click on links or open attachments unless you know the
content is safe. |**

Hi Carrie and Kris,



According to our records, your organization uses SAML authentication for
user sign on with your OverDrive service. We are writing to share that the
current SAML certificate will expire soon and needs to be replaced. This
necessary update will ensure both the security of your users’ information
and the continued ability to sign into your OverDrive collection.



We will update the security certificate on *June 6 at 8:00 a.m. EDT (GMT-4)*,
When the new certificate is published, it will be available from the SAML
SP metadata endpoint specific to your institution, which was first provided
to you during the setup of our SAML connection.



*Your SAML SP metadata endpoint*:

(
https://auth.overdrive.com/v2/external/saml/metadata?websiteId=115&ilsName=chemeketa
)



As the new certificate propagates to our servers, you may experience
intermittent errors near the time of this update.



*Action required*

If you have configured your SAML trust with our services so that you are
automatically pulling the most up-to-date metadata (including certificate
signature) from that endpoint, your users should be able to sign in without
the need for any updates on your end.



However, our configurations show that some of our partners are set up to
specifically look for our current certificate and therefore may need to
make or schedule a manual change when the new certificate is published.



*To ensure a smooth transition, we will temporarily publish the new
certificate on May 23 from 8:00 a.m.-4:30 p.m. EDT (GMT-4). Please test
your logins during this time.*



If you cannot sign in, you may need to prepare changes for the June 6
certificate update. Depending on your SAML server, this may mean making a
manual change or simply re-ingesting the metadata from your institution's
endpoint as noted above. We urge you to use the May 23 test window to
determine the updates you may need to make when the new certificate is live.



You are welcome to share this message with any technical contacts at your
organization. Should you have questions related to this update, please
contact us via the Authentication Support form on the Support tab in
OverDrive Marketplace <https://marketplace.overdrive.com/Support>.



Thanks,
Anthony



*Anthony Bilancini, **Product Support Specialist*

*Library Product Support*

Phone: +1 216-573-6886 ext. 1696

Fax: +1 216-573-6888

*abilancini at overdrive.com <abilancini at overdrive.com>*



*OverDrive **The Leading Digital Reading Platform for Libraries & Schools *

World Headquarters | One OverDrive Way | Cleveland, Ohio 44125 USA

www.overdrive.com Proud to be a Certified B Corp <https://bcorporation.net/>



<https://marketplace.overdrive.com/News/Details/1311?utm_medium=email&utm_source=sig_block&utm_campaign=recorded_books&utm_content=rbmedia_5deal_sigblock>



Confidentiality Notice: This email and any attachments are OverDrive
Confidential for the sole use of the intended recipient. Any review,
copying, or distribution of this email and attachments by others is
strictly prohibited. If you are not the intended recipient, please contact
the sender immediately and permanently delete any copies of this email.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/odlc/attachments/20230518/5c12f624/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 16894 bytes
Desc: not available
URL: <https://omls.oregon.gov/pipermail/odlc/attachments/20230518/5c12f624/attachment-0001.jpg>