Skip to main content

Announcing the WebSSO Modernization Project

Related services: CUWebLogin, Shibboleth, WebSSO

As part of Cornell’s ongoing commitment to sustainability, innovation, and improved IT services, CIT is launching the Web Single Sign-On (WebSSO) Modernization Project, a program to retire the CUWebAuth web application authentication service and migrate to Shibboleth security assertion markup language (SAML)-based authentication. Shibboleth is already in production and this project expands its use to consolidate multiple solutions in the same space.

Currently, CUWebAuth has reached the end of its lifecycle. In order to ensure the best customer experience, the Identity Management team has adopted Shibboleth as the identity provider of choice for web application integrations as it overcomes CUWebAuth’s limitations.

Overall, the WebSSO Modernization Project will require CUWebAuth website administrators to migrate all CUWebAuth applications to Shibboleth and CIT will retire related services, including CUWebLogin, KProxy, CUWebAuth portal proxy, and PermitBridge. The service retirement deadline is September 30, 2021.

Stay tuned for project updates and further details. This project is part of the larger Cornell Safe Access Program, which will provide more modern, scalable solutions to customers and optimize the investment of resources for the university. For questions or comments, please contact project manager Mindy Ziembiec at

Was this page helpful?

Your feedback helps improve the site.