- All access goes through a proxy server. Publishers only need to allow the proxy server and nothing else. This simplifies management. You don't have to worry about expanding networks, remote networks for affiliated organizations, whether or not you should allow your VPN, and any other number of issues.
- The proxy server should use a single sign-on (SSO) service like Shibboleth.
- If you are on campus, and you authenticate onto your Wi-Fi network or your Active Directory domain or whatever, you are automatically authenticated via SSO as well. This way, you will immediately get access to licensed resources seamlessly.
- What about the situation where a colleague emails you a link or you otherwise have something that is not going through a proxy server?
- What about public workstations in the library and elsewhere that theoretically should have access based on their geographic location?