The Shibboleth V2 IdP and SP software have reached End of Life and are no longer supported. This documentation is available for historical purposes only. See the IDP v4 and SP v3 wiki spaces for current documentation on the supported versions.


The <OutOfProcess> element contains settings that affect the behavior of the portion of Shibboleth running outside the web server (shibd). This includes extensions loaded only by shibd. On Version 2.4 and above, it can be omitted, and the default attribute values are used (and no extensions are loaded).

        <Library path="" fatal="true"/>


  • logger (local pathname) (default is shibd.logger on 2.4+)
    • Specifies a log4shib/log4cpp configuration file that defines out-of-process logging behavior generally writing to the shibd.log file. If set, this overrides the logger property in the <SPConfig> parent element, but if omitted (defaulted), the parent property will take precedence.
  • catchAll (boolean) (default is false)
    • If true, "global" exception handlers are used to trap crashes and other "uncontrolled" exceptions. This attempts to keep the shibd process running if at all possible, but makes diagnosing bugs difficult, and can lead to unstable runtime behavior in which the service does not crash but cannot service requests either. Generally should be omitted (or set to false).
  • tranLogFormat (formatting string) (Version 2.5 and Above)
    • Sets the formatting string to use for transaction/audit logging. When omitted, the transaction log uses the old unstructured, multi-line format. See the NativeSPLogging page for details.
  • tranLogFiller (string) (Version 2.5 and Above)
    • Sets the string used in place of non-existent fields when the transLogFormat is applied to a logging event.

Child Elements