EZproxy proves identity by IP address and OpenAthens by signed SAML assertion. How each model fails in practice, and what changes if you run both.