Shibboleth: An Improved Authentication System for UF
Apr
14
Shibboleth is the authentication system that will replace GLAuth. This new system provides added security and scalability while providing the same functionality and new features as well. Shibboleth has been around for many years and has been a production service at UF since November 2008.
A key feature of Shibboleth is that of “federated identity”. Mike Conlon, Associate CIO and Shibboleth project lead, had this to say:
Shibboleth also supports “federated identity.” UF service providers can elect to accept credentials from identity providers outside UF. This could occur in research collaboration and distance learning scenarios. The reverse is also true. Service providers outside UF can choose to accept credentials from the UF identity provider (GatorLink). It is expected that NIH and NSF will standardize on Shibboleth. This means that UF investigators and research administrators will be able to use their GatorLink usernames and passwords when working with these agencies.
It is important to note that because of the security concerns associated with GLAuth that the Office of Information Technology will eventually shut off that system, so migrating over to Shibboleth is not only safe, it’ll eventually be necessary!
In the coming weeks, we’ll talk more about Shibboleth and how it’s being successfully implemented around campus.
Leave a Reply