Page tree

The Shibboleth 2.x software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 and SP3 wiki spaces for current documentation on the supported versions.

Skip to end of metadata
Go to start of metadata

Next steps

Once the IdP has been tested you need to complete the install. Below are some of the tasks you should consider. You should consult IdPConfiguration for further details.

Configure certificates

A suitable certificate should be installed to protect the browser facing port.

Adding other attributes

You can modify the attributes which are released as per IdPAddAttribute.

Configure your IdP to work with a new federation.

As installed the IdP can be tested against the Testshib SP. In order to run against another federation you need to edit relying-party.xml to

  • Remove the references to Testshib
  • Add a reference to your Federation's metadata
  • Add a reference to the key your Federation operator uses to sign the metadata
    There is a program shipped with the installer to automate this operation. Configuration details for the UK Federation and InCommon are available, others may be available from your Federation operator.

To convert an existing installation to run with (for instance) the UK Federation

  • Stop tomcat
  • Run the setFed program in a Windows command box with a suitable configuration file
  • Restart tomcat

    c:\>cd "Program Files (x86)\Internet2\Shib2IdP\bin"
    c:\Program Files (x86)\Internet2\Shib2IdP\bin>sc stop tomcat6
    c:\Program Files (x86)\Internet2\Shib2IdP\bin>setFed.bat ..\conf\UKFederation-config.xml
    Entity ID =
    Relying Party configured for UK Federation
    c:\Program Files (x86)\Internet2\Shib2IdP\bin>sc start tomcat6

Other tasks

Recreating the WAR file

If you change the JavaServer Pages (JSP) files, or need to regenerate the WAR file for any other reason, it suffices to open a command prompt and from within it cd into the Shib2IdpInstall subdirectory of the installation directory and type 'install'.

Installing new versions of the component software (Tomcat and the IdP)

This should be done as per the instructions supplied with the new components.

  • No labels