Contributions
Shibboleth 2 Contributions and Extensions
Identity Provider Extensions
The following extensions are software components that may be installed into the Shibboleth 2 Identity Provider.
Extension | Supported IdP Versions | Maintainer Contact Info. | Description |
|---|---|---|---|
2.3 | Extension that enables users to consent to the release of attributes. | ||
2.x | GakuNin | Forked version of uApprove (above), which allows users to select attributes to be released. | |
? | Enables the IdP to issue Holder-of-Key SAML assertions. | ||
2.3 | The x509-login-handler implements an authentication handler for the Shibboleth IdP and will set the authentication context class | ||
2.x, 3.x | Provides IdP usage statistics by analyzing audit log files. | ||
2.X | IdP monitoring script for graphing Shibboleth usage | ||
2.x | Provides ECP support. Note ECP support was rolled in to the main IdP distribution in version 2.3, do not attempt to use this plugin with that, or future, versions. | ||
2.x |
| Provides an attribute data connector to a RESTful webservice. | |
2.2 | Provides a dynamic metadata provider which is based on the newest HTTP metadata provider. | ||
2.x | Provides a connector that can be used to extract attributes from a web service. (And the web service, in turn, can obtain those attributes from almost anywhere.) | ||
2.?, 2.4.x | This is a JAAS-based login handler for Multi Factor authentication (one, two or more factors). | ||
2.? | Provides an attribute data and persistent ID connector for MongoDB. | ||
2.x | Provides an attribute data connector for OrientDB. | ||
2.3+ | Provides an easy way to connect your Shibboleth IdP to a memcached server, in order to create a stateful cluster. It is intended to be a lightweight alternative to using the Terracotta software. | ||
2.2+ | Ohio State extensions, primarily a custom login module for SSO with stateless clustering, and workflow-like login handler with Velocity-based UI and post-login notification hooks. | ||
2.x | Provides support authentication with the German ID card (nPA). | ||
2.3 | The Kerberos Login Handler uses the kerberos protocol to implement an SSO (Single Sing On) authentication mechanism. | ||
2.3 | An extension to the username/password login handler and a new data connector that allows for the creation of new attributes based on the IP address of the user agent at authentication time. | ||
2.? | Facebook Login Servlet (FLS) provides three way integration among Identity Provider, Facebook and SQL database. With its help, user can perform quick authentication, based on credentials retrieved from Facebook Graph and data received from SQL database. | ||
2.3 | The Duo Two-Factor Authentication Login Handler for Shibboleth adds Duo Security two-factor authentication to an existing JAAS user authentication for Shibboleth identity providers. It is based on the Shibboleth UsernamePassword login handler. | ||
2.3+ | A replacement storage service for Shibboleth IdP v2 that uses Infinispan to provide cluster support. | ||
2.x | The SSO-CAS Login Handler allows the use of forced authentication while using a SSO-CAS server to authenticate the user. | ||
2.x | Munin plugins to graph IdP requests and logins per relying party. Requires the IdP Audit Log Analysis Tool to parse the log files. | ||
2.3+ | A Shibboleth IdP external authentication plugin that delegates the authentication to the CAS. Supports the ability to utilize a full range of native CAS protocol features such as | ||
2.3+ | A servlet to for better status monitoring of an IdP node which is using Terracotta. | ||
2.3+ | Instructions and template code for writing a Java Spring bean that can be used to change the IdP signature method algorithm from SHA1 to other algorithms. | ||
2.3+ | The Multi-Context Broker login handler implements the InCommon Assurance requirements. | ||
2.3+ | The Database Backed Storage Service is a replacement storage service for Shibboleth that uses a RDMS for session persistence. | ||
2.4 | Enables the identity provider to include a requesting entity's | ||
2.4+ | Single Logout (SLO) implementation by the Hungarian NIIF institute, but rewritten as plugin for a default Shibboleth IdP 2.4 |
Service Provider Extensions
The following extensions are software components that may be installed into the Shibboleth 2 Service Provider.
Extension | Supported SP Versions | Maintainer Contact Info. | Description |
|---|---|---|---|
2.5 or later | GakuNin Federation/PEOFIAMP | Allows making SAML Attribute Queries via /Shibboleth.sso/AttributeQuery?entityID=...&nameId=... and getting back (user) attributes in a JSON data structure. Also includes a Python script attributequery.py to execute in a terminal. This extension is faster and more interoperable than using the resolvertest binary that is bundled with the SP. |