Shibboleth Implemented Protocols and Profiles

Below is a list of the protocols and profiles supported by the "current" Shibboleth products, which are generally the same but any differences are noted.

• A YES does not indicate that every possible option has been implemented as some protocol/profiles have many tens or hundreds of possible options. It does indicate that at minimum all required options are supported.
• Some protocol implementations may not be available in the base download, but are available as extensions.

Identity and Service Provider

¹ Support for SAML 1.0 is minimal and mostly accidental with modern releases.
² Implemented as part of SSO profile support, exposed through additional features in SP 2.6 and later.
³ Implemented only in the form of application notification hooks for IdP-initiated protocol. SP-initiated not supported.
⁴ Implemented to rely on SPSSODescriptor role in metadata, no support for query extension role as yet.
⁵ A first implementation of real Single Logout was added in IdP 3.2 and is still under active development.
⁶ A supported third-party extension is available for V3 and was migrated to a Shibboleth git repository for V4. Substantial configuration instability should be expected between now and an eventual "stable" version delivered with V5 (no sooner than 2021).
⁷ Introduced in IdP V3, see documentation for specifics on features.

Discovery Services