Shibboleth IdP v4 deployment guide

Last Update: 14th June 2023

Introduction

The Shibboleth v4 IdP software was released in March 2020, and earlier versions are now unsupported by the Shibboleth Project, v3 having gone end-of-life at the end of 2020. This page contains general advice about installing and configuring the software, pointers to the Shibboleth project documentation, and some UK federation-specific configuration information. Please contact the UK federation helpdesk for further advice.

Anyone interested in deploying the Shibboleth v4 IdP software should start at the Shibboleth IdP v4 main page and read the system requirements and release notes.

Using the guide

• Upgrading from earlier versions
• Supported software versions
• SAML 1
• Firewall rules
• Browser-facing certificate
• Preparation
• Load balancers
• New deployments - Linux
  • Privileged port 443
  • Apache web server
  • Install and configure Java servlet container
    • Jetty installation and configuration
    • Tomcat installation and configuration
• New deployments - Windows
• Register IdP in UK federation
• Testing IdP deployments
• Important container settings
• Shibboleth Configuration - Linux and Windows
  • General Guidance
  • Logging
  • Federation metadata
  • User authentication and SAML attribute release
    • Active Directory and other LDAP directories
    • Azure Active Directory
  • Customise login page
• Going into production