Integrate ORCID to DSpace 7 authentication

[Joshua Kim]

Hi,

I am trying to integrate ORCID with DSpace 7 authentication. I use it only for authentication purposes at this time. At the modules/authentication.cfg file, I uncommented
plugin.sequence.org.dspace.authenticate.AuthenticationMethod = org.dspace.authenticate.OrcidAuthentication

Also I contacted the ORCID group that they approved my client id and secret. I added the info in the local.cfg file.

orcid.domain-url= https://orcid.org

orcid.api-url = https://api.orcid.org/v3.0

orcid.application-client-id = <YOUR-ORCID-CLIENT-ID>

orcid.application-client-secret = <YOUR-ORCID-CLIENT-SECRET>

But when I go to the login page, ORCID does not show up. Can anyone please help me out?

----------------

Joshua Kim

Web Developer, Library IT

Library, Museums and Press

University of Delaware

[Tim Donohue]

Hi Joshua,

Assuming everything is correctly configured, it's likely this issue:

https://wiki.lyrasis.org/display/DSDOC7x/ORCID+Integration#ORCIDIntegration-I'munabletoauthenticateviaORCID

Simply put,  at this time, ORCID authentication only works if the user has configured their ORCID account to share their email address with DSpace. 

If this isn't the issue you are seeing, then you should use our troubleshooting guide to look for the underlying error message: https://wiki.lyrasis.org/display/DSPACE/Troubleshoot+an+error#Troubleshootanerror-DSpace7.x(orabove)

Tim

[Joshua Kim]

Thank you Tim. It was fixed. Now I have another issue. After successfully login,

An error occurred during login via ORCID. Make sure you have shared your ORCID account email address with DSpace. If the error persists, contact the administrator

** At ORCID site, I mark my email as public. Also we use only Shibboleth authentication NOT email and password authentication.

[Olayiwola Lawal]

Hi Joshua, I am currently facing this issue. I have my email set as public, but I am getting this: An error occurred during login via ORCID. Make sure you have shared your ORCID account email address with DSpace. If the error persists, contact the administrator.

How were you able to resolve this?

[Rift Blaster]

Hey @Joshua Kim

have you solved the below issue?

"An error occurred during login via ORCID. Make sure you have shared your ORCID account email address with DSpace. If the error persists, contact the administrator"

[Amarsanaa Ganbold]

Same here. All the configs are done and ORCID email visibility setting is set to trusted parties. Anyone solved?

Amaraa

[Salony Permanand]

Same problem . Can't logging but in my case no error is there not even in dspace.log . I redirect to home page url.  

 
Please help if anyone solved

Thanks

[Andrew K]

Hey guys!

I'm having exactly the same problem in 7.6

401unauthorized

An error occurred during login via ORCID. Make sure you have shared your ORCID account email address with DSpace. If the error persists, contact the administrator

My orcid.cfg :

#------------------------------------------------------------------#
#--------------------ORCID GENERIC CONFIGURATIONS------------------#
#------------------------------------------------------------------#
# Configuration with which it is established which user can disconnect a profile from orcid (none, only the admin, only the owner or both).
# Allowed values are disabled, only_admin, only_owner or admin_and_owner
orcid.disconnection.allowed-users = admin_and_owner

#------------------------------------------------------------------#
#--------------------ORCID CLIENT CONFIGURATIONS-------------------#
#------------------------------------------------------------------#
# ORCID API (https://github.com/ORCID/ORCID-Source/tree/master/orcid-api-web#endpoints)
#orcid.domain-url= https://sandbox.orcid.org
orcid.domain-url= https://orcid.org
orcid.authorize-url = ${orcid.domain-url}/oauth/authorize
orcid.token-url = ${orcid.domain-url}/oauth/token
orcid.api-url = https://api.orcid.org/v3.0
orcid.public-url = https://pub.orcid.org/v3.0
orcid.redirect-url = ${dspace.server.url}/api/authn/orcid

# ORCID Credentials
# Your public or member API Credentials, see
# https://orcid.org/content/register-client-application-0
# https://info.orcid.org/register-a-client-application-sandbox-member-api/
orcid.application-client-id = APP-XXXXXXXXXXXX
orcid.application-client-secret = xxxxx-xxxxx-xxx-xxxxxxxxxx

# The scopes to be granted by the user during the login on ORCID (see https://info.orcid.org/faq/what-is-an-oauth-scope-and-which-scopes-does-orcid-support/)
orcid.scope = /authenticate
#orcid.scope = /read-limited
#orcid.scope = /activities/update
#orcid.scope = /person/update

I also tried setting email visible to Everyone.
Interesting that I see in ORCID trusted parties Access type: Get your ORCID iD while other trusted parties might have Access type: Read your information with visibility set to Trusted Parties.

I.e. that looks like DSpace doesn't even ask for the email, right?

WBR,

Andrew

[Andrew K]

Probably worth metnioning that the return URL in browser is https://my.dspace.website/error?status=401&code=orcid.generic-error

I.e., that might be another error not related to the account email address.

And I use public API key.

субота, 2 грудня 2023 р. о 20:20:00 UTC+2 Andrew K пише:

[Andrew K]

dspace log has nothing about it

tomcat log has this for every authentification attempt

127.0.0.1 - - [03/Dec/2023:10:05:29 +0200] "GET /server/api/authn/orcid?code=KNOI5s HTTP/1.1" 302 -

субота, 2 грудня 2023 р. о 20:49:40 UTC+2 Andrew K пише:

[Andrew K]

OK, I'm out of options already

I enabled ORCID auth plugin. Set everything correctly in orcid.cfg
initialize-entities - done
create a Collection for "Person" entities - done
config/modules/researcher-profile.cfg - done
config/modules/authority.cfg - done

I am able to create my Researcher Profile.
But still that 401 error!

Anyone configured ORCID authentification?

[Sean Kalynuk]

Hi Andrew,

 

The public API URL is:

 

https://pub.orcid.org/v3.0

 

The https://api.orcid.org/v3.0 URL is the Member API.

 

-- 

Sean

 

From: dspac...@googlegroups.com <dspac...@googlegroups.com> on behalf of Andrew K <pkm...@gmail.com>
Date: Sunday, December 3, 2023 at 2:46 AM
To: DSpace Technical Support <dspac...@googlegroups.com>
Subject: [dspace-tech] Re: Integrate ORCID to DSpace 7 authentication

Caution: This message was sent from outside the University of Manitoba.

--
All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/ad35b2a1-8146-47f0-95b8-f38ce33bf0a8n%40googlegroups.com.

[Andrew K]

Hey Sean!

That worked! You're a lifesaver! Thanks a lot! 

WBR,
Andrew

вівторок, 5 грудня 2023 р. о 23:47:14 UTC+2 Sean Kalynuk пише: