EZProxy

Quick Summary

EZProxy is a very popular solution used by universities worldwide
EZProxy does not provide authentication itself - it relies on an existing IdP and serves as an SSO proxy that manages sessions
Available in two flavors: fully managed by OCLC or self-hosted; in both cases an administration team is responsible for configuration and maintenance
Configuration consists of defining a list of accessible resources/databases in a config.txt file (or ezproxy.cfg for hosted instances), with each entry being a set of up to six directives called stanzas
IP Proxy is the main selling point, providing a static public IP that can be provided to resource providers (like Statista) to grant access to authorized requests
Also provides SSO proxy functionality to redirect user sessions to federated publishers' endpoints (SAML Service Providers, etc.)
Features URL rewriting (WAYF-less URLs) to minimize how often users must go through the IdP discovery process. Rewritten URLs look like www-statista-com.statista.idm.oclc.org

File	Hosted Name	Self-hosted Name	Purpose
Main config	`ezproxy.cfg`	`config.txt`	Database stanzas and non-authentication configurations
User config	`ezproxy.usr`	`user.txt`	Authentication settings
Patron file	`patron.txt`	`patron.txt`	User credentials (format: `user:password`)
Shibboleth config	`shibuser.txt`	`shibuser.txt`	SAML/Shibboleth authentication mappings

EZProxy supports multiple authentication methods as configured in the user configuration file. See OCLC's documentation for the complete list.

Stanzas are configuration blocks that define how EZProxy handles specific resources. Each stanza can contain up to six directives.

Required Stanzas for Statista:

Test User:

Test Login URL:

https://login.statista.idm.oclc.org/login?url=https://www.statista.com

This logs you in as CPEEZProxyTest (password: CPEEZProxyTestPassword).