You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ctakes.apache.org by "Finan, Sean" <Se...@childrens.harvard.edu> on 2020/11/11 18:49:32 UTC
Re: Changes to UTS Authentication for Authorized Content Distributors
[EXTERNAL]
Hi Greg,
The simple answer is that we have no answer. yet.
This change in authentication will require some work from ctakes developers and we haven't yet mapped out the effort.
We will endeavor to have both an implementation and documentation available before the current authentication is no longer supported by the NLM.
Sean
________________________________________
From: Greg Silverman <gm...@umn.edu.INVALID>
Sent: Wednesday, November 11, 2020 1:26 PM
To: dev@ctakes.apache.org; Reed McEwan; Raymond Finzel; Ben Knoll
Cc: Pei Chen
Subject: Re: Changes to UTS Authentication for Authorized Content Distributors [EXTERNAL]
* External Email - Caution *
For example, the user installation guide has not been updated to reflect
the changes NLM is implementing. The impact for our workflow is pretty
significant, so without a clear picture about what we need to do in order
to not have any down time is - to put it mildly - leaving us in the dark.
Greg--
On Tue, Nov 10, 2020 at 9:18 AM Greg Silverman <gm...@umn.edu> wrote:
> It's still unclear what this means for me as a user of a piece of software
> that uses UTS for authentication purposes. Could someone please, in plain
> language, describe what we as normal users who use software reliant on this
> authentication mechanism will have to do in order to not disrupt any
> running workflows?
>
> Thanks!
>
> Greg--
>
>
> On Mon, Nov 9, 2020 at 7:13 AM McLaughlin, Patrick (NIH/NLM) [E]
> <pa...@nih.gov.invalid> wrote:
>
>> Hello,
>>
>>
>>
>> The UMLS Terminology Services (UTS) is moving from a username/password
>> login to an NIH-federal identity provider system on Monday, November 9.
>> UMLS users will begin migrating their accounts to the new system on this
>> date with a migration deadline of January 15, 2021.
>>
>>
>>
>> You will need to update any systems that use the UMLS user validation API
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e= >, as
>> described in my previous emails. We recommend you implement the new
>> workflow as soon as possible after November 9.
>>
>>
>>
>> Attached are instructions for implementing UMLS user validation with the
>> new system. You MUST supply NLM with the domains (e.g.,
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.example.com&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=AiVteA8b5xOfTwc2GWNl3Zk5bQ0aVjL-jVdSrvJrfuk&e= in the instructions), so that we can whitelist
>> the domains first.
>>
>>
>>
>> The UMLS user validation API
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e= > will
>> remain functional through January 15, 2021; however, UMLS users that create
>> their UTS accounts after November 9 will not have a password, and you will
>> be unable to validate their accounts.
>>
>>
>>
>> Please let us know if you run into any issues or have any questions.
>> Thank you!
>>
>>
>>
>> -Patrick
>>
>>
>>
>> *From:* McLaughlin, Patrick (NIH/NLM) [E] <pa...@nih.gov>
>> *Sent:* Wednesday, September 16, 2020 5:35 PM
>> *To:* dev@ctakes.apache.org
>> *Cc:* Pei Chen <pe...@peistation.com>
>> *Subject:* RE: Changes to UTS Authentication for Authorized Content
>> Distributors
>>
>>
>>
>> Hello,
>>
>>
>>
>> I’m following up on my previous message about changes to the NLM UMLS
>> Terminology Services (UTS) authentication. As an Authorized Content
>> Distributor of UTS content, you will need to modify your implementation to
>> accommodate these changes. Our testing environment is now available for you
>> to test.
>>
>>
>>
>> *We need some information from you.*
>>
>>
>>
>> In order for you to test your implementation, we need two things:
>>
>>
>>
>> 1. A domain name from which you will link your users to our
>> authentication service - We will need to whitelist your domain name for use
>> in our test system. Example: www.yourwebsite.org.
>> 2. A Google email address - We will need to configure a test account
>> for you so that you can test user authentication.
>>
>>
>>
>> If you have questions or concerns, please respond to this email. We
>> appreciate your patience as we make improvements to UTS.
>>
>>
>>
>> -Patrick
>>
>>
>>
>> Patrick McLaughlin
>>
>> Head, Terminology QA & User Services
>>
>> National Library of Medicine
>>
>> 8600 Rockville Pike, MSC 3831, Bethesda, MD 20894
>>
>> patrick.mclaughlin@nih.gov
>>
>>
>>
>> *From:* McLaughlin, Patrick (NIH/NLM) [E] <pa...@nih.gov>
>> *Sent:* Friday, August 14, 2020 6:14 PM
>> *To:* dev@ctakes.apache.org
>> *Cc:* Pei Chen <pe...@peistation.com>
>> *Subject:* Changes to UTS Authentication for Authorized Content
>> Distributors
>>
>>
>>
>> Dear UMLS Licensee,
>>
>>
>>
>> I’m contacting you from the U.S. National Library of Medicine because you
>> are an Authorized Content Distributor of UMLS Terminology Services (UTS)
>> content (https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e= ).
>> We are contacting you because we are making changes to the way in which UTS
>> users authenticate starting this November.
>>
>>
>>
>> *What is changing?*
>>
>>
>>
>> UTS users will no longer authenticate using a username and password.
>> Instead, users will sign in using external authentication services like
>> Login.gov, Google, Facebook, Microsoft, or one of several research
>> organizations. We anticipate that users will begin migrating to external
>> authentication services on November 9, 2020. Users who migrate to these
>> services will no longer authenticate with a username and password. We also
>> anticipate that passwords will be removed from UTS accounts on January 1,
>> 2021. After that point, it will no longer be possible for Authorized
>> Content Distributors to authenticate users with a username and password via
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e= .
>>
>>
>>
>> *What does this mean for Authorized Content Distributors?*
>>
>>
>>
>> If you wish to continue to authenticate UTS users, *you will need to
>> implement a web-based authentication service*. To do this, you will need
>> to provide your users with a web interface that links to our authentication
>> service. The user will navigate to your web interface using their web
>> browser and click a link to our authentication service. Our service will
>> then authenticate the user via an external authentication service (for
>> example, Google or Facebook) and redirect the user back to your web
>> interface. We will return true / false to you to let you know whether the
>> user has an active UTS account. We are working on a test environment for
>> you to test your implementation, and we anticipate that will be ready on
>> August 15, 2020. This will allow you to test your implementation ahead of
>> our November 9 release date.
>>
>>
>>
>> *We need some information from you.*
>>
>>
>>
>> In order for you to test your implementation, we need two things:
>>
>>
>>
>> 1. A domain name from which you will link your users to our
>> authentication service - We will need to whitelist your domain name for use
>> in our test system. Example: www.yourwebsite.org.
>> 2. An email address - We will need to configure a test account for
>> you so that you can test user authentication.
>>
>>
>>
>> If you have questions or concerns, please respond to this email. We
>> appreciate your patience as we make improvements to UTS.
>>
>>
>>
>> Regards,
>>
>> Patrick McLaughlin
>>
>> Head, Terminology QA & User Services
>>
>> National Library of Medicine
>>
>> 8600 Rockville Pike, MSC 3831, Bethesda, MD 20894
>>
>> Phone: 301-827-5063
>>
>> patrick.mclaughlin@nih.gov
>>
>>
>>
>
>
> --
> Greg M. Silverman
> Senior Systems Developer
> NLP/IE <https://urldefense.proofpoint.com/v2/url?u=https-3A__healthinformatics.umn.edu_research_nlpie-2Dgroup&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=zUg0EEq_nwXuc5bWjID16Mepl_vMAkJjyaGHs1R4FbU&e= >
> Department of Surgery
> University of Minnesota
> gms@umn.edu
>
>
--
Greg M. Silverman
Senior Systems Developer
NLP/IE <https://urldefense.proofpoint.com/v2/url?u=https-3A__healthinformatics.umn.edu_research_nlpie-2Dgroup&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=zUg0EEq_nwXuc5bWjID16Mepl_vMAkJjyaGHs1R4FbU&e= >
Department of Surgery
University of Minnesota
gms@umn.edu
Re: Changes to UTS Authentication for Authorized Content Distributors [EXTERNAL]
Posted by Greg Silverman <gm...@umn.edu.INVALID>.
Thanks Sean! I appreciate your candid answer.
Greg--
On Wed, Nov 11, 2020 at 12:49 PM Finan, Sean <
Sean.Finan@childrens.harvard.edu> wrote:
> Hi Greg,
>
> The simple answer is that we have no answer. yet.
>
> This change in authentication will require some work from ctakes
> developers and we haven't yet mapped out the effort.
>
> We will endeavor to have both an implementation and documentation
> available before the current authentication is no longer supported by the
> NLM.
>
> Sean
> ________________________________________
> From: Greg Silverman <gm...@umn.edu.INVALID>
> Sent: Wednesday, November 11, 2020 1:26 PM
> To: dev@ctakes.apache.org; Reed McEwan; Raymond Finzel; Ben Knoll
> Cc: Pei Chen
> Subject: Re: Changes to UTS Authentication for Authorized Content
> Distributors [EXTERNAL]
>
> * External Email - Caution *
>
>
> For example, the user installation guide has not been updated to reflect
> the changes NLM is implementing. The impact for our workflow is pretty
> significant, so without a clear picture about what we need to do in order
> to not have any down time is - to put it mildly - leaving us in the dark.
>
> Greg--
>
> On Tue, Nov 10, 2020 at 9:18 AM Greg Silverman <gm...@umn.edu> wrote:
>
> > It's still unclear what this means for me as a user of a piece of
> software
> > that uses UTS for authentication purposes. Could someone please, in plain
> > language, describe what we as normal users who use software reliant on
> this
> > authentication mechanism will have to do in order to not disrupt any
> > running workflows?
> >
> > Thanks!
> >
> > Greg--
> >
> >
> > On Mon, Nov 9, 2020 at 7:13 AM McLaughlin, Patrick (NIH/NLM) [E]
> > <pa...@nih.gov.invalid> wrote:
> >
> >> Hello,
> >>
> >>
> >>
> >> The UMLS Terminology Services (UTS) is moving from a username/password
> >> login to an NIH-federal identity provider system on Monday, November 9.
> >> UMLS users will begin migrating their accounts to the new system on this
> >> date with a migration deadline of January 15, 2021.
> >>
> >>
> >>
> >> You will need to update any systems that use the UMLS user validation
> API
> >> <
> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e=
> >, as
> >> described in my previous emails. We recommend you implement the new
> >> workflow as soon as possible after November 9.
> >>
> >>
> >>
> >> Attached are instructions for implementing UMLS user validation with the
> >> new system. You MUST supply NLM with the domains (e.g.,
> >>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.example.com&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=AiVteA8b5xOfTwc2GWNl3Zk5bQ0aVjL-jVdSrvJrfuk&e=
> in the instructions), so that we can whitelist
> >> the domains first.
> >>
> >>
> >>
> >> The UMLS user validation API
> >> <
> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e=
> > will
> >> remain functional through January 15, 2021; however, UMLS users that
> create
> >> their UTS accounts after November 9 will not have a password, and you
> will
> >> be unable to validate their accounts.
> >>
> >>
> >>
> >> Please let us know if you run into any issues or have any questions.
> >> Thank you!
> >>
> >>
> >>
> >> -Patrick
> >>
> >>
> >>
> >> *From:* McLaughlin, Patrick (NIH/NLM) [E] <pa...@nih.gov>
> >> *Sent:* Wednesday, September 16, 2020 5:35 PM
> >> *To:* dev@ctakes.apache.org
> >> *Cc:* Pei Chen <pe...@peistation.com>
> >> *Subject:* RE: Changes to UTS Authentication for Authorized Content
> >> Distributors
> >>
> >>
> >>
> >> Hello,
> >>
> >>
> >>
> >> I’m following up on my previous message about changes to the NLM UMLS
> >> Terminology Services (UTS) authentication. As an Authorized Content
> >> Distributor of UTS content, you will need to modify your implementation
> to
> >> accommodate these changes. Our testing environment is now available for
> you
> >> to test.
> >>
> >>
> >>
> >> *We need some information from you.*
> >>
> >>
> >>
> >> In order for you to test your implementation, we need two things:
> >>
> >>
> >>
> >> 1. A domain name from which you will link your users to our
> >> authentication service - We will need to whitelist your domain name
> for use
> >> in our test system. Example: www.yourwebsite.org.
> >> 2. A Google email address - We will need to configure a test account
> >> for you so that you can test user authentication.
> >>
> >>
> >>
> >> If you have questions or concerns, please respond to this email. We
> >> appreciate your patience as we make improvements to UTS.
> >>
> >>
> >>
> >> -Patrick
> >>
> >>
> >>
> >> Patrick McLaughlin
> >>
> >> Head, Terminology QA & User Services
> >>
> >> National Library of Medicine
> >>
> >> 8600 Rockville Pike, MSC 3831, Bethesda, MD 20894
> >>
> >> patrick.mclaughlin@nih.gov
> >>
> >>
> >>
> >> *From:* McLaughlin, Patrick (NIH/NLM) [E] <pa...@nih.gov>
> >> *Sent:* Friday, August 14, 2020 6:14 PM
> >> *To:* dev@ctakes.apache.org
> >> *Cc:* Pei Chen <pe...@peistation.com>
> >> *Subject:* Changes to UTS Authentication for Authorized Content
> >> Distributors
> >>
> >>
> >>
> >> Dear UMLS Licensee,
> >>
> >>
> >>
> >> I’m contacting you from the U.S. National Library of Medicine because
> you
> >> are an Authorized Content Distributor of UMLS Terminology Services (UTS)
> >> content (
> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e=
> ).
> >> We are contacting you because we are making changes to the way in which
> UTS
> >> users authenticate starting this November.
> >>
> >>
> >>
> >> *What is changing?*
> >>
> >>
> >>
> >> UTS users will no longer authenticate using a username and password.
> >> Instead, users will sign in using external authentication services like
> >> Login.gov, Google, Facebook, Microsoft, or one of several research
> >> organizations. We anticipate that users will begin migrating to external
> >> authentication services on November 9, 2020. Users who migrate to these
> >> services will no longer authenticate with a username and password. We
> also
> >> anticipate that passwords will be removed from UTS accounts on January
> 1,
> >> 2021. After that point, it will no longer be possible for Authorized
> >> Content Distributors to authenticate users with a username and password
> via
> >>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e=
> .
> >>
> >>
> >>
> >> *What does this mean for Authorized Content Distributors?*
> >>
> >>
> >>
> >> If you wish to continue to authenticate UTS users, *you will need to
> >> implement a web-based authentication service*. To do this, you will need
> >> to provide your users with a web interface that links to our
> authentication
> >> service. The user will navigate to your web interface using their web
> >> browser and click a link to our authentication service. Our service will
> >> then authenticate the user via an external authentication service (for
> >> example, Google or Facebook) and redirect the user back to your web
> >> interface. We will return true / false to you to let you know whether
> the
> >> user has an active UTS account. We are working on a test environment for
> >> you to test your implementation, and we anticipate that will be ready on
> >> August 15, 2020. This will allow you to test your implementation ahead
> of
> >> our November 9 release date.
> >>
> >>
> >>
> >> *We need some information from you.*
> >>
> >>
> >>
> >> In order for you to test your implementation, we need two things:
> >>
> >>
> >>
> >> 1. A domain name from which you will link your users to our
> >> authentication service - We will need to whitelist your domain name
> for use
> >> in our test system. Example: www.yourwebsite.org.
> >> 2. An email address - We will need to configure a test account for
> >> you so that you can test user authentication.
> >>
> >>
> >>
> >> If you have questions or concerns, please respond to this email. We
> >> appreciate your patience as we make improvements to UTS.
> >>
> >>
> >>
> >> Regards,
> >>
> >> Patrick McLaughlin
> >>
> >> Head, Terminology QA & User Services
> >>
> >> National Library of Medicine
> >>
> >> 8600 Rockville Pike, MSC 3831, Bethesda, MD 20894
> >>
> >> Phone: 301-827-5063
> >>
> >> patrick.mclaughlin@nih.gov
> >>
> >>
> >>
> >
> >
> > --
> > Greg M. Silverman
> > Senior Systems Developer
> > NLP/IE <
> https://urldefense.proofpoint.com/v2/url?u=https-3A__healthinformatics.umn.edu_research_nlpie-2Dgroup&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=zUg0EEq_nwXuc5bWjID16Mepl_vMAkJjyaGHs1R4FbU&e=
> >
> > Department of Surgery
> > University of Minnesota
> > gms@umn.edu
> >
> >
>
> --
> Greg M. Silverman
> Senior Systems Developer
> NLP/IE <
> https://urldefense.proofpoint.com/v2/url?u=https-3A__healthinformatics.umn.edu_research_nlpie-2Dgroup&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=zUg0EEq_nwXuc5bWjID16Mepl_vMAkJjyaGHs1R4FbU&e=
> >
> Department of Surgery
> University of Minnesota
> gms@umn.edu
>
--
Greg M. Silverman
Senior Systems Developer
NLP/IE <https://healthinformatics.umn.edu/research/nlpie-group>
Department of Surgery
University of Minnesota
gms@umn.edu
Re: Changes to UTS Authentication for Authorized Content Distributors [EXTERNAL]
Posted by Peter Abramowitsch <pa...@gmail.com>.
I was planning to make the change for our implementation at UCSF in the
next couple of weeks. After discussions with Patrick McLauchlin and some
testing with the new system, I thought of offering two cTAKES configuration
options. One will mimic the current attributes, and the other would be
self-evident,
Option 1 (for backward compatibility)
Wherever it is set, if UmlsUserValidator is called with "apikey" as the
umls_user, it assume user umls_password is the UMLS_API_KEY
Option 2.
If there is a SystemProperty ctakes.umls_apikey it will use its
value with the validator
Ditto if there is an EnvironmentVariable UMLS_APIKEY
If you're interested I will post the changes.
Peter
On Wed, Nov 11, 2020 at 7:49 PM Finan, Sean <
Sean.Finan@childrens.harvard.edu> wrote:
> Hi Greg,
>
> The simple answer is that we have no answer. yet.
>
> This change in authentication will require some work from ctakes
> developers and we haven't yet mapped out the effort.
>
> We will endeavor to have both an implementation and documentation
> available before the current authentication is no longer supported by the
> NLM.
>
> Sean
> ________________________________________
> From: Greg Silverman <gm...@umn.edu.INVALID>
> Sent: Wednesday, November 11, 2020 1:26 PM
> To: dev@ctakes.apache.org; Reed McEwan; Raymond Finzel; Ben Knoll
> Cc: Pei Chen
> Subject: Re: Changes to UTS Authentication for Authorized Content
> Distributors [EXTERNAL]
>
> * External Email - Caution *
>
>
> For example, the user installation guide has not been updated to reflect
> the changes NLM is implementing. The impact for our workflow is pretty
> significant, so without a clear picture about what we need to do in order
> to not have any down time is - to put it mildly - leaving us in the dark.
>
> Greg--
>
> On Tue, Nov 10, 2020 at 9:18 AM Greg Silverman <gm...@umn.edu> wrote:
>
> > It's still unclear what this means for me as a user of a piece of
> software
> > that uses UTS for authentication purposes. Could someone please, in plain
> > language, describe what we as normal users who use software reliant on
> this
> > authentication mechanism will have to do in order to not disrupt any
> > running workflows?
> >
> > Thanks!
> >
> > Greg--
> >
> >
> > On Mon, Nov 9, 2020 at 7:13 AM McLaughlin, Patrick (NIH/NLM) [E]
> > <pa...@nih.gov.invalid> wrote:
> >
> >> Hello,
> >>
> >>
> >>
> >> The UMLS Terminology Services (UTS) is moving from a username/password
> >> login to an NIH-federal identity provider system on Monday, November 9.
> >> UMLS users will begin migrating their accounts to the new system on this
> >> date with a migration deadline of January 15, 2021.
> >>
> >>
> >>
> >> You will need to update any systems that use the UMLS user validation
> API
> >> <
> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e=
> >, as
> >> described in my previous emails. We recommend you implement the new
> >> workflow as soon as possible after November 9.
> >>
> >>
> >>
> >> Attached are instructions for implementing UMLS user validation with the
> >> new system. You MUST supply NLM with the domains (e.g.,
> >>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.example.com&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=AiVteA8b5xOfTwc2GWNl3Zk5bQ0aVjL-jVdSrvJrfuk&e=
> in the instructions), so that we can whitelist
> >> the domains first.
> >>
> >>
> >>
> >> The UMLS user validation API
> >> <
> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e=
> > will
> >> remain functional through January 15, 2021; however, UMLS users that
> create
> >> their UTS accounts after November 9 will not have a password, and you
> will
> >> be unable to validate their accounts.
> >>
> >>
> >>
> >> Please let us know if you run into any issues or have any questions.
> >> Thank you!
> >>
> >>
> >>
> >> -Patrick
> >>
> >>
> >>
> >> *From:* McLaughlin, Patrick (NIH/NLM) [E] <pa...@nih.gov>
> >> *Sent:* Wednesday, September 16, 2020 5:35 PM
> >> *To:* dev@ctakes.apache.org
> >> *Cc:* Pei Chen <pe...@peistation.com>
> >> *Subject:* RE: Changes to UTS Authentication for Authorized Content
> >> Distributors
> >>
> >>
> >>
> >> Hello,
> >>
> >>
> >>
> >> I’m following up on my previous message about changes to the NLM UMLS
> >> Terminology Services (UTS) authentication. As an Authorized Content
> >> Distributor of UTS content, you will need to modify your implementation
> to
> >> accommodate these changes. Our testing environment is now available for
> you
> >> to test.
> >>
> >>
> >>
> >> *We need some information from you.*
> >>
> >>
> >>
> >> In order for you to test your implementation, we need two things:
> >>
> >>
> >>
> >> 1. A domain name from which you will link your users to our
> >> authentication service - We will need to whitelist your domain name
> for use
> >> in our test system. Example: www.yourwebsite.org.
> >> 2. A Google email address - We will need to configure a test account
> >> for you so that you can test user authentication.
> >>
> >>
> >>
> >> If you have questions or concerns, please respond to this email. We
> >> appreciate your patience as we make improvements to UTS.
> >>
> >>
> >>
> >> -Patrick
> >>
> >>
> >>
> >> Patrick McLaughlin
> >>
> >> Head, Terminology QA & User Services
> >>
> >> National Library of Medicine
> >>
> >> 8600 Rockville Pike, MSC 3831, Bethesda, MD 20894
> >>
> >> patrick.mclaughlin@nih.gov
> >>
> >>
> >>
> >> *From:* McLaughlin, Patrick (NIH/NLM) [E] <pa...@nih.gov>
> >> *Sent:* Friday, August 14, 2020 6:14 PM
> >> *To:* dev@ctakes.apache.org
> >> *Cc:* Pei Chen <pe...@peistation.com>
> >> *Subject:* Changes to UTS Authentication for Authorized Content
> >> Distributors
> >>
> >>
> >>
> >> Dear UMLS Licensee,
> >>
> >>
> >>
> >> I’m contacting you from the U.S. National Library of Medicine because
> you
> >> are an Authorized Content Distributor of UMLS Terminology Services (UTS)
> >> content (
> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e=
> ).
> >> We are contacting you because we are making changes to the way in which
> UTS
> >> users authenticate starting this November.
> >>
> >>
> >>
> >> *What is changing?*
> >>
> >>
> >>
> >> UTS users will no longer authenticate using a username and password.
> >> Instead, users will sign in using external authentication services like
> >> Login.gov, Google, Facebook, Microsoft, or one of several research
> >> organizations. We anticipate that users will begin migrating to external
> >> authentication services on November 9, 2020. Users who migrate to these
> >> services will no longer authenticate with a username and password. We
> also
> >> anticipate that passwords will be removed from UTS accounts on January
> 1,
> >> 2021. After that point, it will no longer be possible for Authorized
> >> Content Distributors to authenticate users with a username and password
> via
> >>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__uts.nlm.nih.gov_help_license_validateumlsuserhelp.html&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=kuqvrMCb5p9FcXZjvAf2xzaeqn__Pi9PDsjbonEERNE&e=
> .
> >>
> >>
> >>
> >> *What does this mean for Authorized Content Distributors?*
> >>
> >>
> >>
> >> If you wish to continue to authenticate UTS users, *you will need to
> >> implement a web-based authentication service*. To do this, you will need
> >> to provide your users with a web interface that links to our
> authentication
> >> service. The user will navigate to your web interface using their web
> >> browser and click a link to our authentication service. Our service will
> >> then authenticate the user via an external authentication service (for
> >> example, Google or Facebook) and redirect the user back to your web
> >> interface. We will return true / false to you to let you know whether
> the
> >> user has an active UTS account. We are working on a test environment for
> >> you to test your implementation, and we anticipate that will be ready on
> >> August 15, 2020. This will allow you to test your implementation ahead
> of
> >> our November 9 release date.
> >>
> >>
> >>
> >> *We need some information from you.*
> >>
> >>
> >>
> >> In order for you to test your implementation, we need two things:
> >>
> >>
> >>
> >> 1. A domain name from which you will link your users to our
> >> authentication service - We will need to whitelist your domain name
> for use
> >> in our test system. Example: www.yourwebsite.org.
> >> 2. An email address - We will need to configure a test account for
> >> you so that you can test user authentication.
> >>
> >>
> >>
> >> If you have questions or concerns, please respond to this email. We
> >> appreciate your patience as we make improvements to UTS.
> >>
> >>
> >>
> >> Regards,
> >>
> >> Patrick McLaughlin
> >>
> >> Head, Terminology QA & User Services
> >>
> >> National Library of Medicine
> >>
> >> 8600 Rockville Pike, MSC 3831, Bethesda, MD 20894
> >>
> >> Phone: 301-827-5063
> >>
> >> patrick.mclaughlin@nih.gov
> >>
> >>
> >>
> >
> >
> > --
> > Greg M. Silverman
> > Senior Systems Developer
> > NLP/IE <
> https://urldefense.proofpoint.com/v2/url?u=https-3A__healthinformatics.umn.edu_research_nlpie-2Dgroup&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=zUg0EEq_nwXuc5bWjID16Mepl_vMAkJjyaGHs1R4FbU&e=
> >
> > Department of Surgery
> > University of Minnesota
> > gms@umn.edu
> >
> >
>
> --
> Greg M. Silverman
> Senior Systems Developer
> NLP/IE <
> https://urldefense.proofpoint.com/v2/url?u=https-3A__healthinformatics.umn.edu_research_nlpie-2Dgroup&d=DwIFaQ&c=qS4goWBT7poplM69zy_3xhKwEW14JZMSdioCoppxeFU&r=fs67GvlGZstTpyIisCYNYmQCP6r0bcpKGd4f7d4gTao&m=mIcyXu5lIFGpKDoh1Gy8Cpi8zJMuo64EtaNNv3RRB_8&s=zUg0EEq_nwXuc5bWjID16Mepl_vMAkJjyaGHs1R4FbU&e=
> >
> Department of Surgery
> University of Minnesota
> gms@umn.edu
>