Registering a Shibboleth 2 Service Provider
Before applying to register a Shibboleth 2 service provider entity with the UK Federation, you need to:
- Install the Internet2 reference software implementation: go to the Internet2 Shibboleth installation pages and follow the instructions.
- Obtain an X.509 certificate, as described in the UK federation X509 Digital Certificate Requirements. The same certificate may be used for both an Identity Provider and a Service Provider.
- Make changes appropriate to your installation to the standard Shibboleth 2 configuration files. This is described in the UK federation Shibboleth 2.x SP configuration page.
Once the software has been installed and a certificate obtained, a Management Liaison should email the registration request to the UK Federation Helpdesk and include the information listed below. This information will be verified and placed in an <EntityDescriptor> entry in the federation metadata.
- Administrative contact: A name and email address for the Administrative contact.
- Technical contact: A name and email address for the Technical contact.
- Support contact: A name and email address for the Support contact.
- Entity ID: The entity ID is a URI identifying your service provider. It must be different from the entity ID of any existing identity provider or service provider you may already have in the UK federation. If your service provider is already a member of another federation please give its existing entity ID, even if it appears to be federation-specific. If it is not already a member of another federation, please consult the UK federation Entity ID policy.
- Service display name: A short name (a few words at most) to identify your site.
- Organization URL: The URL of a web page providing a description of the organisation providing the service.
- Service description URL: The URL of a web page providing a description of the service itself. If omitted, this defaults to the Organization URL.
- Software: (optional) The type and release number of the software you have chosen to deploy for your SP; e.g. reference Shibboleth SP vsn 2.1.2. This information is optional, but providing it enables us to gauge appropriate support levels for software in use within the federation.
- Automatically generated metadata: The SP uses its configuration files to generate its metadata at start-up. This metadata can be found at:
https://hostname/Shibboleth.sso/Metadata
where hostname is the fully qualified domain name of the SP server, eg.
where hostname is the fully qualified domain name of the SP server, eg.
sp.example.com. Please include the link to the metadata in your email registration request.
We will let you know by email once the UK Federation metadata has been updated to include the information you have supplied.