Shibboleth

---

Shibboleth is a federated identity method based on SAML that provides single sign-on capabilities and enables websites to make informed authorization decisions for access to protected online resources.

• often used by universities and public service organizations

How it Works

• In a Shibboleth implementation,
  • a user attempts to retrieve resources from a Shibboleth-enabled website
  • which then sends SAML authentication information over URL queries
  • user is then redirected to an identity provider with which they can authenticate using this SAML information
  • identity provider then responds to the service provider (the Shibboleth-enabled website) with the proper authentication information
  • site validates this response and grants the user access to certain resources based on their SAML information