User Authentication Strategies in Multi-Institutional Environments > OhioLINK > Authentication system

Policies and Privacy

• Patron record at home institution must be valid: member of the institution and not expired
• Authentication failures are tracked
• Cookies expire in two hours
• Cookies are checked to see if they are coming from the same IP address
• Cookie is not added to the patron record cache; user cannot be identified from cookie
• For auditing purposes, a one-week record of cookie-to-patron matches is kept