Search | Directories | Reference Tools
UW Home > UWIN > Computing and Networking > Identity and Access Management > Shibboleth IdP 

Shibboleth IdP

Service Provider Spotlights

Some illustrative uses of the UW Shibboleth Identity Provider (IdP) for authentication and attribute exchange.

Service Provider Description
Catalyst Web Tools Catalyst Logins to Catalyst Web Tools use Shibboleth for cross-organizational authentication and collaboration, using trust metadata provided by the InCommon federation. Catalyst designed and incorporated a custom "Where Are You From" service into their login process to allow visitors to select their affiliated identity provider. Catalyst currently supports logins from the UW IdP or ProtectNetwork, an "open" identity provider in the InCommon federation. The UW IdP's attribute release policy sends eduPersonPrincipalName to Catalyst for authentication.
» Read more about Catalyst's use of Shibboleth
Microsoft DreamSpark Microsoft Logins to Microsoft DreamSpark use Shibboleth and trust metadata provided by the InCommon federation. The UW IdP's attribute release policy sends eduPersonScopedAffiliation to Microsoft for federated verification of student enrollment and privacy-preserving eduPersonTargetedID values for record keeping.
WebAssign @ Washington WebAssign Logins to WebAssign @ Washington use Shibboleth and trust metadata provided by the InCommon federation. The UW IdP's attribute release policy only permits logins for users associated with participating UW Chemistry and UW Physics courses; if permitted, an eduPersonEntitlement attribute for the course is sent to WebAssign with eduPersonPrincipalName, name, and UW student number.
UW Technology & Central Admin Wikis UW Technology Logins to the UW Technology and Central Admin Confluence wikis use Shibboleth and trust metadata provided by the InCommon federation. A custom "Where Are You From" service allows visitors to select and login using any participating IdP in the InCommon federation; the UW IdP is the default choice. The UW IdP's attribute release policy sends eduPersonPrincipalName to these wikis for authentication.
StudentsOnly StudentsOnly StudentsOnly uses Shibboleth and trust metadata provided by the InCommon federation to verify student enrollment through federated logins. The UW IdP's attribute release policy sends name, email, and eduPersonScopedAffiliation to StudentsOnly for identity matching and automated student enrollment verification.
Database of Recorded American Music NYU Logins to the Database of Recorded American Music (DRAM) use Shibboleth and trust metadata provided by the InCommon federation. The UW IdP's attribute release policy sends eduPersonScopedAffiliation to DRAM for eligibility verification, restricting release to the "member" value for current UW students, staff, and faculty.
RefWorks RefWorks Logins to RefWorks use Shibboleth and trust metadata provided by the InCommon federation. The UW IdP's attribute release policy sends eduPersonScopedAffiliation and privacy-preserving eduPersonTargetedID values to RefWorks for eligibility verification and record keeping.
UWare E-Academy Logins to the UWare Store use Shibboleth and a bi-lateral trust arrangement between the UW IdP and e-academy.com (a software fulfillment company). The UW IdP's attribute release policy sends eduPersonScopedAffiliation and privacy-preserving eduPersonTargetedID values to e-academy for eligibility verification and record keeping.
Internet2 Wiki Internet2 Logins to the Internet2 Confluence Wiki involve a "Where Are You From" choice by the visitor. This step allows visitors to select their identity provider. When UW members select the UW IdP, the resulting logins use trust metadata provided by the InCommon federation. The UW IdP's attribute release policy sends eduPersonPrincipalName for authentication to the wiki.
CFD 2006 GivingStation CreateHope Logins for UW employees to the Washington State Combined Fund Drive's GivingStation for the 2006 campaign used Shibboleth and a bi-lateral trust arrangement between the UW IdP and CreateHope. The UW IdP's attribute release policy sent UW Employee ID to CreateHope for eligibility verification and reporting to the UW and to the state of Washington.
Ctrax Music Service Cdigix The registration to the former Ctrax Music Service used Shibboleth with trust metadata provided the InCommon federation. The UW IdP's attribute release policy sent eduPersonScopedAffiliation to Cdigix for eligibility verification.