Configuration How-To's

These sections provide descriptions of how to perform specific tasks sectioned off by SP, IdP, interoperability, and others.

Get your deployment to...

• BuildAFederation: This step-by-step guide describes how to create your own federation for SSO and your own community.

• SessionManagement: Shibboleth and applications it protects use a lot of types of sessions. Configure them for security and usability.

• EAuthenticationDeployment: Shibboleth 1.3 includes a certified eAuthentication compliant protocol handler

• IntegrateWithLDAP: Integrate your Shibboleth deployment with LDAP groups in an effective way.

• ShareNewAttribute: Add a new attribute to your bilateral or federated interactions.

• AlternateProfiles: Use attribute push and/or the Artifact profile.

Get an IdP to...

• AddSP: Communicate with a new SP

• Define, gather, and release a new attribute

• InteropWithOnedotOne: How to handle a 1.1 SP from a newer IdP

• CreateUsefulContainerLogs: configure the servlet container (Tomcat) to create useful, fine grained adjustable logs using log4j

• IdPMultipleFederations: Interoperating with multiple federations using one IdP

• Authenticate based on IP address: Optionally authenticate a user for a particular service based solely on their IP address, such as for kiosks and libraries.

• BlockStaleRequests: Detect when users hit the Back button or bookmark improperly.

• BlameSP: Report malformed AuthnRequest errors as the fault of the SP and not a local issue.

• Deny Unknown Providers: Deny requests sent from SPs for which no metadata can be found.

• Interoperate with a commerical SAML Service Provider: Have your IdP interoperate with a commercial Service Provider running SAML

Get a C++ SP to...

• SPMultipleRPs: Use a single SP with multiple relying parties, e.g. multiple federations

• AddSeparateApplication: Make an SP identify an application on the same webserver as a separate Application/providerId (eg for a vhost)

• NewSPAttribute: Add support for and acceptance of a new attribute for the SP

• LazySession: Take advantage of everything lazy sessions can do for the user experience

• SPForwardProxy: Deploy the SP in a forward-proxy web environment

• SPNoSSL: Deploy the SP behind SSL accelerators and load balancers

• InteropWithOnedotOne: How to handle a 1.1 IdP from a newer SP

• JavaContentProtection: Protect content within Java webapps protected by Shibboleth either directly or through mod_jk

• AccessControl: Protect content using static access control rules before serving pages

• DenyIdP: Restrict the ability of some IdPs within a federation to access a resource

• ExportAssertions: Expose raw SAML information via the HTTP_SHIB_ATTRIBUTES header

Packaged Application Integration

• ShibbolizedConfluence: One approach to integrating Shibboleth with the Confluence Wiki

• ShibbolizedBedework: One approach to integrating Shibboleth with Bedework (an open-source, enterprise calendar system for higher education).