Skip to Content

Shibboleth IdP install

Install Shibboleth
Download Shibboleth 2.1.5 from here to /root/ directory Then unpack shibboleth-identityprovider-2.1.5-bin.tar.gz file by: 
tar zxf shibboleth-identityprovider-2.1.5-bin.tar.gz
Go to shibboleth-identityprovider-2.1.5 and copy all files from endorsed/ into ${TOMCAT_HOME}/endorsed/
Tomcat 6.x doesn't contain endorsed directory by default so you need to create it. Then copy.. 
cd shibboleth-identityprovider-2.1.5
cp endorsed/* ${TOMCAT_HOME}/endorsed/
Also copy downloaded mysql java connector into shibboleth-identityprovider-2.1.2/lib/
change permissions of install.sh file to be executable and run install.sh 
chmod u+x install.sh
./install.sh
During a installation process you will be asked to enter path and hostname. as a path enter /opt/shibboleth-idp
as a hostname enter long host name ex. idp.example.com
Configuration
Change owner of /opt/shibboleth-idp to tomcat6 (it may be vary it depends on os) 
chown -R tomcat6 /opt/shibboleth-idp
Set IDP_HOME in /etc/profile 
IDP_HOME=/opt/shibboleth-idp
export IDP_HOME
Tomcat
Create file $TOMCAT_HOME/conf/Catalina/localhost/idp.xml and add 
<Context
       docBase="/opt/shibboleth-idp/war/idp.war"
       privileged="true" antiResourceLocking="false"
       antiJARLocking="false" unpackWAR="true" />
restart tomcat
Check tomcat and shibboleth (/opt/shibboleth-idp/logs/) logs.
The check https://your_host/idp/profile/Status you should get OK in result. That means at least shibboleth servlet has been loaded by tomcat.

  • Share this
  • Printer-friendly version
  • Login to post comments
  • 2254 reads

Who is Edugate for?

Edugate provides a single access mechanism that can enable access to online resources supporting alliances, research collaboration, consortia and shared services. Now users can use the credentials issued by their institution to access Edugate enabled web-sites and benefit from a personalised and persistent experience, with privacy features that put the user in control.

  • 1943 reads

Enable users to use the campus directory credential to access Edugate enabled web sites beyond the campus boundary from anywhere, whilst protecting the campus directory from unnecessary searches and the user credentials from use on web sites beyond your control. 
 

Your patrons are individuals, not IP Addresses!
 
Enable publishers to provide users with a consistent and personalised experience regardless of their location or the device they are using.
Improve the end-user experience by providing Single-Sign-On and reducing the frequency of prompts for campus credentials.
Connect your patrons to your subscribed resources,  even where the user finds the resource without using the library.

  • 2000 reads

Restrict access to your club or society web-site to valid campus users without needing the campus IT department to provide you with access to the entire campus user database.
For student unions, Edugate enables online elections that can authenticate all students currently enrolled without needing to expose campus credentials or personal information.

Example: UL Students Union

  • 1998 reads

Provide your suppliers with a means to interact with all campus members. Whether its parking management, physical access management, catering or sports facilities, Edugate can provide a secure means to validate staff and student status. Access cards or tokens can be issued online in a self-service manner, removing the some, if not all, of the paperwork.

Example: Apcoa Parking Management

  • 2147 reads

When establishing any online service that will be used by multiple institutions, Edugate will provide a means to authorise access to the service by user, role or institution without having to issue usernames/passwords or other credentials to the users of the service.
Most research projects are collaborations and when it comes to hosting collaborative tools or sharing documents and data, Edugate enables the hosting partner to seamlessly grant access to the project content.

Example: NDLR Repository
Example: HEAR and DARE

  • 2109 reads

Campus IT managers and IT security officers are increasingly reluctant to synchronise user credentials or open up campus directory services to applications that are hosted in the cloud. Even locally hosted managed applications that require the campus credential to be processed by the application present a security risk. Edugate is built on the open SAML federated access standard that is used in the financial services, aerospace and governmant eID and provides Single-Sign-On without the risks.

e-Government
Whether it's a central or local government service that needs to validate that a student is a current student, Edugate can open up the potential for numerous e-Government services for students (e.g. Grants and Tax Credits)

e-Commerce
When offering a student discount online, relying on a campus email address leaves the offer open to abuse since many institutions offer 'email for life'. Edugate will allow you to know if a customer is a current student and which institution the customer is affiliated to.

  • 1931 reads