Skip to main content

Shibboleth Articles

back
Show titles with any search term.
  • Comparisons and Relationship with CUWebAuth and CUWebLogin

    • The information in this article is intended technical staff who create, maintain, and support applications that require authenticaion. End-users do not need this information. Use...
    • When signing into a Shibboleth-protected service, you may see the CUWebLogin screen. This is because the Identity Provider is using CUWebAuth/CUWebLogin to authenticate...
    • Shibboleth and CUWebLogin are integrated and share the same single-sign-on. If a user is signed into their browser with CUWebLogin, and then navigates to a site that uses Shibboleth, the user won'...

    Service Parameters

    • EntityID for the Cornell Identity Provider Prod IDP: https://shibidp.cit.cornell.edu/idp/shibboleth Test IDP: https://shibidp-test.cit.cornell.edu/idp/shibboleth...
    • Federated login with Shibboleth has two major components: Identity Providers (IdP) which authenticate users and release selected information about them, and Service Providers (SP) which accept and...
    • Does the Cornell Identity Provider provide a logout service? No. Our credentials remain valid until you close your browser. We recommend that you give the user instructions to quit the...
    • You will probably not need to set up a Shibboleth Identity Provider. You will be using the CIT Maintained Identity Provider (and possibly others) to authenticate users.  

    Vendor Details

    • When a vendor says their application supports SSO with SAML2, it means they can use our Shibboleth Identity provider for authentication and authorization. For more...
    • When a vendor says they support SSO, it might mean they support Shibboleth, or CUWebLogin, or both. More and more vendors are supporting Shibboleth SSO login. For...