Skip to main content

Announcing the WebSSO Modernization Project

Related services: CUWebLogin, Shibboleth, WebSSO


As part of Cornell’s ongoing commitment to sustainability, innovation, and improved IT services, CIT is launching the WebSSO Modernization Project, a program to retire the CUWebAuth web application authentication service and migrate to Shibboleth SAML-based authentication. Shibboleth is already in production and this project expands its use to consolidate multiple solutions in the same space.

Currently, CUWebAuth has reached the end of its lifecycle. In order to ensure the best customer experience, the Identity Management team has adopted Shibboleth as the identity provider of choice for web application integrations as it overcomes CUWebAuth’s limitations.

Overall, the WebSSO Modernization Project will require CUWebAuth website administrators to migrate all CUWebAuth applications to Shibboleth and CIT will retire related services, including CUWebLogin, KProxy, CUWebAuth portal proxy, and PermitBridge. The service retirement deadline is September 30, 2021. This project is part of the larger Cornell Safe Access Program, which will provide more modern, scalable solutions to customers and optimize the investment of resources for the university.

Stay tuned for project updates and further details. For questions or comments, please contact project manager Mindy Ziembiec at mlz24@cornell.edu.

Was this page helpful?

Your feedback helps improve the site.

Comments?