Raven/Shibboleth: Difference between revisions

From RavenWiki
Jump to navigationJump to search
(→‎Demo links: Add (as yet broken) MyAthens link)
No edit summary
 
(24 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{New Docs}}
[[Image:ShibbolethLogoColor.png|right|Shibboleth logo]]
[[Image:ShibbolethLogoColor.png|right|Shibboleth logo]]


==Shibboleth information==
Shibboleth is an international development supporting authentication and authorisation for web-based applications, based on international standards. Raven has supported the Shibboleth protocol (in addition to the older, local [[Raven/Webauth | Webauth]] protocol) since September 2007.
 
===Background===
 
* [[A brief introduction to Shibboleth]]
* [https://spaces.internet2.edu/display/SHIB/ShibbolethGlossary Shibboleth Glossary]
* "Federated Security: The Shibboleth Approach", R. L. "Bob" Morgan, Scott Cantor, Steven Carmody, Walter Hoehn, and Ken Klingenstein -  [http://www.educause.edu/pub/eq/eqm04/eqm0442.asp as html]; [http://www.educause.edu/ir/library/pdf/eqm0442.pdf as pdf]
* Part 3 of "Web Services Security", Bilal Siddiqui, talks about SAML (the Security Assertions Markup Language) which is what underpins Shibboleth. [http://webservices.xml.com/pub/a/ws/2003/03/04/security.html Part 1] [http://webservices.xml.com/pub/a/ws/2003/04/01/security.html Part 2] [http://webservices.xml.com/pub/a/ws/2003/05/13/security.html Part 3] [http://webservices.xml.com/pub/a/ws/2003/07/22/security.html Part 4]
* [http://hdl.handle.net/1988/2771 John Paschoud's 'Shibboleth: Guide for SysAdmins']
* [http://www-uxsup.csx.cam.ac.uk/~jw35/courses/itliaison/shib/ Jon's IT Liaison Meeting presentation], Jan 2007
* Jon's Techlink presentation, May 2007 [http://www-uxsup.csx.cam.ac.uk/~jw35/courses/techlink/shib-intro/ as HTML], [http://www-uxsup.csx.cam.ac.uk/~jw35/courses/techlink/shib-intro/shib-intro.pdf as PDF]
 
===Organizations===
 
* [http://www.jisc.ac.uk/ JISC], and their [http://www.jisc.ac.uk/uploaded_documents/CMRoadmap03_05.doc Shibboleth plans] (MS Word format, sorry)
** [http://involve.jisc.ac.uk/wpmu/jam/ JISC Access Management Team Blog]
* [http://www.becta.org.uk/ BECTA]
* [http://www.ukfederation.org.uk/ The UK Access Management Federation]
 
===Software and reference===
 
* [http://shibboleth.internet2.edu/ Internet2 Shibboleth Project]
* [http://www.guanxi.uhi.ac.uk/index.php/Guanxi:About Guanxi] (an alternative implementation)
* [http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security SAML]
* [http://www.educause.edu/eduperson/ EduPerson] (while Shib doesn't require the EduPerson LDAP schema, it does use it to define some attributes)
* Athens:
** [http://www.lib.cam.ac.uk/electronicresources/Access_Passwords.htm#Athens Local]
** [http://www.athensams.net/ From Eduserv]
* [http://www.switch.ch/aai/support/tools/arpviewer.html ArpViewer]
 
==Shibboleth Development Project==
 
===Demo links===
 
UK Federation test targets (only the first will work from Lapwing):
* https://target.sdss.ac.uk/secure/index.html
* https://target.iay.org.uk:8446/secure/index.html
* https://target.iay.org.uk:8446/secure/printenv.cgi
* https://nevis.ed.ac.uk:8885/cgi-bin/printenv
 
Example SPs:
* [https://spaces.internet2.edu/display/SHIB/WebHome Shibboleth Project Wiki]
* [https://weather.atomwide.com/ Atomwide Weather Project]
* [http://www.sciencedirect.com/ ScienceDirect]
* [http://www.filmandsound.ac.uk/ Film & Sound Online]
* [http://zetoc.mimas.ac.uk:8000/cgi-bin/shibb Zetoc Alert] (using SDDS SSL certificate; not from Lapwing)
* [http://zetoc.mimas.ac.uk:8000/cgi-bin/wzshib Zetoc Search] (dito)
* [https://auth.athensams.net/setsite.php?id=urn:mace:eduserv.org.uk:athens:provider:cam.ac.uk&ath_dspid=ATHENS.MY&ath_returl=%2Fmy MyAthens] via Shib-to-Athens Gateway (not yet working 2007-05-14)
 
These and other SPs are listed on the UK Federation's [http://www.ukfederation.org.uk/content/Documents/AvailableServices Available Services] page.
 
* [https://mnementh.csi.cam.ac.uk/secure/ Local demo site] on mnementh
 
===Project Documents===


* [[Shibboleth Attribute Usage and Derivation]]
; '''[[Shibboleth background and reference]]''' : links, mainly external, to background and reference information about Shibboleth and the Raven/Shibboleth service
* [[Assigning Athens permissions sets]]
; '''[[Shibboleth software]]''' : sources of software implementing the Shibboleth protocol
* [[Data Protection issues with Shibboleth]]
; '''[[Shibboleth documentation and HOWTOs]]''' : additional documentation and HOWTOs

Latest revision as of 11:40, 3 March 2020

We're working on improving Raven resources for developers and site operators.

Try out the new Raven documentation for size.

Shibboleth logo

Shibboleth is an international development supporting authentication and authorisation for web-based applications, based on international standards. Raven has supported the Shibboleth protocol (in addition to the older, local Webauth protocol) since September 2007.

Shibboleth background and reference
links, mainly external, to background and reference information about Shibboleth and the Raven/Shibboleth service
Shibboleth software
sources of software implementing the Shibboleth protocol
Shibboleth documentation and HOWTOs
additional documentation and HOWTOs