Shibboleth Identity Provider Deployment

The Shibboleth Identity Provider (IdP) is a Java application that runs on a Java web application server (i.e. Apache Tomcat, Jetty).
uApprove was an application to let the user approve attribute releases, developed by Switch for IdPv2.x. Since IdPv3, similar functionality is part of the distribution.

Deployment Guides

Certificate Roll-Over

• Identity Provider Certificate Rollover Guide (replacing an old with a new certificate)
• Acceptable Certificates

Attributes about Users that need to be supported

Every Home Organization in the Switch edu-ID Federation has to be able to provide a certain set of user attributes to resources. See the Switch edu-ID Attributes page for details.

Shibboleth IdP 4.x & 5.x

Shibboleth IdP 3.x

Installation and Configuration

User Consent Configuration

Migration and Upgrades

• Upgrade Identity Provider from 3.x to latest version of 3

Interfederation Support

The following guide explains how an Identity Provider can be configured to allow its users to access AAI resources in other federations outside of Switzerland. For deployment instructions, have a look at the interfederation deployment guide.

Design Templates

• Design guidelines for login page

Further Documentation

• Shibboleth IdP Documentation (Shibboleth Wiki)
• Shibboleth IdP Trobleshooting (Shibboleth Wiki)
• Shibboleth mailing lists