Shibboleth documentation and HOWTOs

Deploying Shibboleth SPs in the University

Information (sketchy at present) about deploying Shibboleth SPs within the University, either just to protect sites with Raven or with a view to joining the UK federation and potentially letting in people from other institutions. This information is intended to support the deployment of Internet2's SP software version 2.1 - other versions of this, and other software, should work but the Computing Service is currently limited as to the amount of support it can provide on these. Note that version 1.3 of Internet2's SP software is EOL as from 30th June, 2010.

The definitive documentation for all this starts with the Internet2 Shib2 wiki (in particular the installation and configuration pages). Almost everything you might need will be here, but you may need to explore - try following any and all links that look even vaguely useful.

For deploying an SP in the UK federation, see the UK federation website, and in particular the 'Shibboleth 2' section of Entity registration.

• Installing SP2.1 under Linux

Information

• Editing XML
• EntityIDs
• Attributes released by the Raven IdP

Resources

• 'Ucam Federation' IdP metadata
• shibbileth2.xml - internal use skeleton
• attribute-map.xml - internal use skeleton

Other University Shibboleth information

• A University Shibboleth Glossary
• Athens Gateway access control

Shibboleth Implementation Project documents

These documents, originally working document belonging to the Computing Service's Shibboleth Development Project, are retained for historical and reference purposes.

• Shibboleth Attribute Usage and Derivation
• Assigning Athens permissions sets
• Data Protection issues with Shibboleth
• Using the Shibboleth to Athens Gateway
• Athens DA Protocol
• More on eduPersonPrincipleName