Shibboleth Implemented Protocols and Profiles

Below is a list of the protocols and profiles supported by V2.x and V3.x Shibboleth products, which are generally the same but any differences are noted.

• A YES does not indicate that every possible option has been implemented as some protocol/profiles have many tens or hundreds of possible options. It does indicate that at minimum all required options are supported.
• Some protocol implementations may not be available in the base download, but are available as extensions.

Identity and Service Provider

¹Support for SAML 1.0 is minimal and mostly accidental with current releases.
² Implemented as part of SSO profile support, exposed through additional features in SP 2.6.
³ Implemented only in the form of application notification hooks for IdP-initiated protocol. SP-initiated not supported.
⁴ HTTP-Artifact binding only supported outbound to SP, not inbound.
⁵ Implemented to rely on SPSSODescriptor role in metadata, no support for query extension role as yet.
⁶ The basic variant is in the core since IdP 2.3. The delegated variant requires an extension. See ECP for details.
⁷A first implementation of real Single Logout was added in IdP 3.2 and is still under active development.
⁸A supported third-party extension is available for V3 and will be migrated to a Shibboleth git repository for V4. Substantial configuration instability should be expected between now and an eventual "stable" version delivered with V5 (no sooner than 2021).
⁹Introduced in IdP V3, see documentation for specifics on features

Discovery Services