Shibboleth documentation and HOWTOs

Deploying Shibboleth SPs in the University

Information about deploying Shibboleth Service Providers (SPs) within the University, either just to protect sites with Raven or with a view to joining the UK federation and potentially letting in people from other institutions. This information is intended to support the deployment of version 2.1 of Internet2's SP software - other versions of this, and other software, should work but the Computing Service is limited as to the amount of support it can provide on these. Note that version 1.3 of Internet2's SP software reaches the end of its support life on 30th June, 2010.

The definitive documentation for all this starts with the Internet2 Shib2 wiki (in particular the installation and configuration pages). Almost everything you might need will be here, but you may need to explore - try following any and all links that look even vaguely useful.

For deploying an SP in the UK federation, see the UK federation website, and in particular the 'Shibboleth 2' section of Entity registration.

Instructions

• Intended Audience, Prerequisites, etc.

• Installing SP2.1 under Linux
• Installing SP2.1 under Windows
• Installing SP2.1 for Apache under Windows
• Installing SP2.1 under MacOS

• SP registration
• Configuring access control
• Virtual hosting issues

Additional information

• Editing XML
• EntityIDs
• Attributes released by the Raven IdP
• SSL, certificates and security

Resources

• 'Ucam Federation' IdP metadata
• shibbileth2.xml - internal use skeleton
• attribute-map.xml - internal use skeleton

Other University Shibboleth information

• A University Shibboleth Glossary
• Athens Gateway access control

Shibboleth Implementation Project documents

These documents, originally working document belonging to the Computing Service's Shibboleth Development Project, are retained for historical and reference purposes.

• Shibboleth Attribute Usage and Derivation
• Assigning Athens permissions sets
• Data Protection issues with Shibboleth
• Using the Shibboleth to Athens Gateway
• Athens DA Protocol
• More on eduPersonPrincipleName