IP Authentication via EZproxy

In this article we will show you how to integrate your institutional clients through IP authentication using EZproxy.

What is an IP? An IP address is a number that identifies a device (computer, tablet, laptop, smartphone) or a group of devices; for example, all the computers on a university's network.

What types of IP can you assign to your users? Our system allows you to add the following formats:

• Single IP: 201.234.241.72
• IP range: from 201.234.241.72 to 201.234.241.79 — you can also enter it in CIDR notation (201.234.241.72/29)

The most common case is when access is sold to an institution so that all its students connect through the EZproxy network: in that case, all users are identified by the same IP, the proxy's.

This setup is simpler than it looks. You will need to exchange information with your client:

THEM: they will provide you with the IP or IPs and configure their side with the data you send them.

YOU: you will configure the IPs in the platform and provide the client with the URL and the Stanza code.

First, select the integration method and then follow the indicated steps.

• Option A — Access via referred user
• Option B — Access via individualized users

OPTION A — ACCESS VIA REFERRED USER

In this method, all users from the institution are identified under a single reference user that you configure in the platform.

1. The first step is to find out the IP or IPs that we will assign (the ones users will access from).

2. Identify the client with a user in the platform.

You will need to create a user in the Library: from Control Panel -> Users -> Create (if the user already exists, skip to the next step)

3. Assign the plan specific to the client.

On the user, click Edit and assign the corresponding plan.

4. Assign the IP or IPs of the client.

Go to the user and click the dropdown menu (button with a downward arrow next to Edit) and select "Assign IP range"

Add the received IP and click Assign.

If the client only provided one IP, you only need to fill in the "from" field. If they provided an IP range, you will need to fill in both the "from" field (start of the range) and the "to" field (end of the range). Repeat this for each different IP or IP range.

Continue to the URL and Stanza code section below.

OPTION B — ACCESS VIA INDIVIDUALIZED USERS

In this method, each person who accesses from the configured IP gets their own user in the platform, allowing individual usage tracking.

1. Get the IP or IP range from which users will access.

2. Configure the IP in the platform.

Go to Control Panel → Settings → Integrations → IP Configuration and click Create.

In the window that appears, enter the IP or IP range in the From and To fields:

• Single IP: fill in only the From field.
• IP range: fill in From (start) and To (end of the range).

Click Assign to add the range. Repeat for each different IP or range.

Then configure the access options for users entering through this IP:

• Automatically accept Privacy Policies and Terms and Conditions: users will automatically accept the terms when they access for the first time.
• Allow full access to all publications: enables access to your entire catalog without restriction or the need for a specific plan.
• Automatically assign a plan to users: assigns the chosen plan to each user who accesses through this IP.

Click Save to confirm.

Continue to the URL and Stanza code section below.

URL AND STANZA CODE

The following steps are the same for both options.

Provide the client with the URL they will use to redirect their users. This is the URL that the client will place in the button or link where their users will click to access the library.

Automatic authentication (recommended)

https://{your-library-domain}/library

Example: https://alephdigital.publica.la/library

On-demand authentication (only if you already had it configured)

https://{your-library-domain}/auth/ip

Send the Stanza code to the client.

Title <TITLE>

HTTPHeader -request -process X-XSRF-TOKEN
HTTPHeader -request -process X-CSRF-TOKEN

HTTPMethod PUT
HTTPMethod PATCH
HTTPMethod DELETE
HTTPMethod OPTIONS
HTTPMethod TRACE
HTTPMethod CONNECT

URL https://<DOMAIN>/auth/ip

HJ <DOMAIN>
DJ <DOMAIN>

Example with real data:

Title Exempligratia

HTTPHeader -request -process X-XSRF-TOKEN
HTTPHeader -request -process X-CSRF-TOKEN

HTTPMethod PUT
HTTPMethod PATCH
HTTPMethod DELETE
HTTPMethod OPTIONS
HTTPMethod TRACE
HTTPMethod CONNECT

URL https://exempligratia.publica.la/auth/ip

HJ exempligratia.publica.la
DJ exempligratia.publica.la

Once both sides are configured, the integration is complete. Ask your client to perform an access test to confirm everything works correctly.

COMMON ERRORS

The most frequent failure occurs when the user tries to access and the system asks for a username and password — this should not happen with IP authentication.

Check the following points:

• The URL in the button or link does not include the /library or /auth/ip ending
• The URL does not include https:// at the beginning
• The Stanza code is incomplete
• The IPs entered do not match the IPs users are accessing from
• (Option A) The referred user has a simultaneous session limit lower than the number of people who need to access
• (Option B) The access options in Settings → Integrations → IP Configuration are not configured correctly

👉 Tool to troubleshoot IP or URL assignment problems

We hope this tutorial has been easy for you. If you have any questions, write to us at support@publica.la.

Updated on: 13/07/2026