The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.



Options common to most/all profiles:

securityConfiguration   SecurityConfigurationBean named shibboleth.DefaultSecurityConfigurationAn object containing all of the default security-related objects needed for peer authentication and encryption. See SecurityConfiguration for complete details.
disallowedFeatures 3.3Integer0A bitmask of features to disallow, the mask values being specific to individual profiles


Modifying the security configuration is usually done to:

  • specify an alternate signing or decryption key to use
  • control signing or encryption algorithms (but for metadata you control, it's advisable to control algorithms by using an extension to specify supported algorithms).