This software is not yet released and this is preliminary documentaton subject to significant change. It should not be used in production or to protect important resources at this stage.
Home
Below is the documentation available for V1 of the Shibboleth Service Provider Hub implementation.
The Hub is the spiritual successor to what was delivered as the Service Provider “shibd” service in older releases. Documentation for the supported “Agents” can be found in https://shibboleth.atlassian.net/wiki/spaces/SP4. The documentation is split because these are very different software products that may be operated by different sets of people and are versioned separately. Because the Hub implementation in Java is new software, it is being delivered as V1.0.
The Hub is implemented as a set of plugins for the Shibboleth Identity Provider, with this major version requiring at least V5.2 (for now, subject to change) of the IdP software. It is not a requirement or even recommended for the Hub to be operating within an IdP that is itself operating as an IdP, but it is not precluded. See the https://shibboleth.atlassian.net/wiki/spaces/sphub1/pages/4573888534 for some further notes about this scenario.
For general information on installing, upgrading, and removing IdP plugins, please refer to https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500688.
There are currently 3 plugins available, the first one required and the rest optional:
Plugin ID | Description | Release Notes | Bug Reporting |
|---|---|---|---|
net.shibboleth.plugin.shibd | Required, provides the underlying hub implementation and configuration support for the rest of the plugins. | ||
net.shibboleth.plugin.shibd.saml | Provides support for SAML 2.0 to the hub’s agents. | ||
net.shibboleth.plugin.shibd.oidc | Provides support for OpenID Connect 1.0 to the hub’s agents. |
All our software is licensed under the Apache 2.0 open source software license.
All deployers need to subscribe to the Shibboleth Announcement mailing list. This is where announcements about new releases, end of life of past releases, and security advisories are distributed. The IdP software also provides tools for checking for its own, and plugin, updates that may be useful in managing a deployment.
Intermediate Topics
Migrating from V3
Deployment Planning
Agent Resolver Service
Defining Agents
Defining Applications
Defining Relying Party Overrides
Defining Profile Configurations
SAML Profile Configurations
OIDC Profile Configurations
Credential Resolver Service
Logging and Auditing
Approaches to SAML Metadata
Automating Issuer Values
Handling POST data during login
Advanced Topics
Agent Settings Reference
Application Settings Reference
Relying Party Settings Reference
SAML Settings Reference
OIDC Settings Reference