Raven/Shibboleth

Shibboleth information

Background

• A brief introduction to Shibboleth
• Shibboleth Glossary
• "Federated Security: The Shibboleth Approach", R. L. "Bob" Morgan, Scott Cantor, Steven Carmody, Walter Hoehn, and Ken Klingenstein - as html; as pdf
• Part 3 of "Web Services Security", Bilal Siddiqui, talks about SAML (the Security Assertions Markup Language) which is what underpins Shibboleth. Part 1 Part 2 Part 3 Part 4
• John Paschoud's 'Shibboleth: Guide for SysAdmins'
• Jon's IT Liaison Meeting presentation, Jan 2007
• Jon's Techlink presentation, May 2007 as HTML, as PDF

Organizations

• JISC, and their Shibboleth plans (MS Word format, sorry)
  • JISC Access Management Team Blog
• BECTA
• The UK Access Management Federation

Software and reference

• Internet2 Shibboleth Project
• Guanxi (an alternative implementation)
• SAML
• EduPerson (while Shib doesn't require the EduPerson LDAP schema, it does use it to define some attributes)
• Athens:
  • Local
  • From Eduserv
• ArpViewer

Shibboleth Development Project

Demo links

UK Federation test targets (only the first will work from Lapwing):

• https://target.sdss.ac.uk/secure/index.html
• https://target.iay.org.uk:8446/secure/index.html
• https://target.iay.org.uk:8446/secure/printenv.cgi
• https://nevis.ed.ac.uk:8885/cgi-bin/printenv

Example SPs:

• Shibboleth Project Wiki
• Atomwide Weather Project
• ScienceDirect
• Film & Sound Online
• Zetoc Alert (using SDDS SSL certificate; not from Lapwing)
• Zetoc Search (dito)
• MyAthens via Shib-to-Athens Gateway (not yet working 2007-05-14)

These and other SPs are listed on the UK Federation's Available Services page.

• Local demo site on mnementh

Project Documents

• Shibboleth Attribute Usage and Derivation
• Assigning Athens permissions sets
• Data Protection issues with Shibboleth
• Shibboleth Attribute Release meta-Policy
• Using the Shibboleth to Athens Gateway
• Athens DA Protocol