Auto authentication redirect support for SSO/SURFconext URLs

In the Netherlands, more and more publishers are switching form IP-based access to SURFconext. SURFconext is a federated identity management service that is more secure and provides more features than access via a proxy server. The downside of SURFconext is that the login process becomes less straightforward for the end user.

With a proxy server, Lean Library can detect www.example.net and change it to http://uniproxy398573.com/?login=http://www.example.net on the fly. The user may have to login on their university's account, but they'll have access right after that. It will also work on deeplinks like www.example.net/docs/example.pdf.

With SURFconext, users have to go to a specific page and click on a "login with surfconext" button to gain access. This works via a WAYF page. Here they must select the organisation they're part of and then login on their university account. This process cannot be automated or simplified by Lean Library at the moment. The only thing I can do is create an Assist popup that appears on the homepage of a subscribed site (not on other pages). In this popup I can put instructions like "click here to login", or "go to this page and click on the login button". Giving users access to the specific www.example.net/docs/sciencepaper.html URL they're on after authentication, is impossible.

However, sometimes a publisher provides a redirector that can be used to login via SURFconext and send the users to a specific page after authentication. This depends solely on the publisher though and there is no universal redirector build into surfconext that I'm aware of.

My idea is therefore to create enhanced assist popups, that provide redirector support for every entry. This would work for every redirector that doesn't use session keys. For instance for Kluwer the redirector (the bold part) is:

https://www.inview.nl/publication/WKNL_CSL_31&idp=https://engine.surfconext.nl/authentication/idp/metadata.

With O'Reilly it's more complicated as you have to replace https://learning.oreilly.com/library/view/ai-and-machine/9781492078180/ with https://go.oreilly.com/hogeschool-rotterdam/library/view/ai-and-machine/9781492078180/

This is not a 100% fix, but would make authentication for a couple of SSO/surfconext sites more seamless for the end user.