Introduction
ORCID provides a persistent digital identifier that uniquely identifies researchers. The ORCID iD is researcher-centric, meaning in general the researcher is responsible for creating, maintaining, and asserting their own ORCID iD. ORCID provides an API for integrating ORCID services with research systems.
Goals
Leverage COmanage to allow the researcher to authenticate their ORCID iD to the collaboration, and to write the ORCID to LDAP for use in collaboration services.
This will be achieved by using a COmanage Organizational Identity Source to sync an ORCID record to a COmanage Organizational Identity, and then using a COmanage Pipeline to copy the ORCID to the CO Person record. Finally, the ORCID will be provisioned using the LDAP Provisioner.
Architecture and Components
Configuration
This section assumes that each component is already installed and configured for basic connectivity.
ORCID
An ORCID iD is required. For non-members, it will be necessary to use credentials established from a personal ORCID iD, ORCID does not currently support "institutional" or "service" accounts except for paid members.
LDAP Server
The LDAP server must be configured with the eduPerson schema (201602 or later).
COmanage
It is assumed that COmanage is already set up with an enrollment process, such as the one used for the COmanageSSHPilot.
The Pipeline must be defined first. The configuration should look like:
- Name: ORCID Pipeline
- Status: Active
- Match Strategy: Do Not Match
- Sync on Add: Yes
- Sync on Update: Yes
- Sync on Delete: Yes
- Create CO Person Role Record: No
Next, configure an ORCID Organizational Identity Source. The initial setup will look like:
- Plugin: OrcidSource
- Status: Active
- Sync Mode: Manual
- Pipeline: ORCID Pipeline
After saving the initial setup, the ORCID configuration page will show the redirect URI needed to obtain the Client ID and Secret from ORCID. (More information about how to obtain the Client ID and Secret is available here.) Record the Client ID and Secret in the COmanage ORCID configuration page and click Save.
Finally, create an enrollment flow for researchers to self-link their ORCID iD.
Usage
Resources