Raven/Shibboleth

Shibboleth information

Background

• A brief introduction to Shibboleth
• Shibboleth Glossary
• "Federated Security: The Shibboleth Approach", R. L. "Bob" Morgan, Scott Cantor, Steven Carmody, Walter Hoehn, and Ken Klingenstein - as html; as pdf
• Part 3 of "Web Services Security", Bilal Siddiqui, talks about SAML (the Security Assertions Markup Language) which is what underpins Shibboleth. Part 1 Part 2 Part 3 Part 4
• John Paschoud's 'Shibboleth: Guide for SysAdmins'
• Jon's IT Liaison Meeting presentation, Jan 2007
• Jon's Techlink presentation, May 2007 as HTML, as PDF

Organizations

• JISC, and their Shibboleth plans (MS Word format, sorry)
  • JISC Access Management Team Blog
• BECTA
• The UK Access Management Federation

Shibboleth-compliant publishers

• Ovid

Software and reference

• Internet2 Shibboleth Project
• Guanxi (an alternative implementation)
• SAML
• EduPerson (while Shib doesn't require the EduPerson LDAP schema, it does use it to define some attributes)
• Athens:
  • Local
  • From Eduserv
• ArpViewer
• A Shib SP in PHP?

Shibboleth Development Project

Demo links

UK Federation test targets (only the first will work from Lapwing):

• https://target.sdss.ac.uk/secure/index.html
• https://target.iay.org.uk:8446/secure/index.html
• https://target.iay.org.uk:8446/secure/printenv.cgi
• https://nevis.ed.ac.uk:8885/cgi-bin/printenv

Example SPs via Shib (not all guaranteed to be accessible from Cambridge). These and other SPs are listed on the UK Federation's Available Services page:

• Shibboleth Project Wiki
• Atomwide Weather Project
• ScienceDirect
• Film & Sound Online (click on 'via UK Federation')
• Index to the Times (click on 'via UK Federation')
• Zetoc Alert
• Zetoc Search
• JISCMail (see https://www.jiscmail.ac.uk/help/policy/shibmode.htm for details)
• JANET Videoconferencing Booking Service (see http://www.jvcs.ja.net/vcng/help/shibboleth.shtml)

• Local demo site on mnementh

Example Athens content providers via Shib->Athens gateway (or indeed almost any other Athens-protected resource - see http://www.lib.cam.ac.uk/electronicresources/):

• MyAthens
• Film & Sound Online (click on 'via Athens')
• Index to the Times (click on 'via Athens')

Project Documents

• Shibboleth Attribute Usage and Derivation
• Assigning Athens permissions sets
• Data Protection issues with Shibboleth
• Shibboleth Attribute Release policy summary
• Shibboleth Attribute Release meta-Policy
• Using the Shibboleth to Athens Gateway
• Athens DA Protocol
• A University Shibboleth Glossary
• University IdP Terms and Conditions
• More on eduPersonPrincipleName