End of Support for Shibboleth V2 Identity Provider

Posted on Thursday, 17 October 2019

The UK federation will be ending its support for Shibboleth V2 Identity Provider (IdP) deployments on December 31st 2019.

Why we are doing this:

Shibboleth IdP v2 IdP deployments have been End of Life since July 2016 and ending support for this will allow effort to be focused on current deployments.

Who does this concern:

The UK federation support team has contacted institutions and organisations known to be running Shibboleth IdP v.2 software, however it is possible that some remain unidentified in which case if you believe your institution may be running Shibboleth IdP v2 please consider the action detailed below.

What should you do?

Obviously, migration from Shibboleth IdP v2 is essential and we would advise institutions to consider the following options:

1. Migration to the latest Shibboleth Version 3.4.6 Identity Provider -This will need some technical resource from your institution, but the UK federation helpdesk will be able to assist. Please contact us at service@ukfederation.org.uk

A Shibboleth IdP v3 guide can be found here https://www.ukfederation.org.uk/content/Documents/Setup3IdP

We would also recommend technical staff considering migration but unsure how to move forwards, to attend the next Jisc Shibboleth training course which is held in London on 18th & 19th November. Further details can be found here: https://www.jisc.ac.uk/training/implementing-shibboleth

2. Explore the Jisc Trust and Identity consultancy offering.

https://www.jisc.ac.uk/consultancy/trust-and-identity

The offering includes assistance for upgrade and migration planning, preparation and implementation of Shibboleth IdP based services. Work required will depend on the complexity of the deployment and destination requirements.

For Jisc members, we’d recommend that you contact your Jisc Account Manager in the first instance.

3. Look at 3rd party options

https://www.ukfederation.org.uk/content/Documents/3rdPartySupport

4. If you have a legacy deployment registered with us and it is unused, let us know and we will deregister it. You should then decommission the deployment.

If you’ve any questions about the options above or don’t believe you will be able to migrate if you are operating an End of Life Shibboleth IdP please get in touch at service at ukfederation.org.uk or mark.williams at ukfederation.org.uk.

Edited by SteveGlover on 17 October 2019, at 03:52 PM