Shibboleth®

The Shibboleth System is a standards based, open source software package for web single sign-on across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner.

A Security Advisory has been issued describing the impact of a recently disclosed flaw in XML Encryption. You can read it here.

A Security Advisory has been issued for OpenSAML, affecting all versions of the IdP prior to 2.3.2 and all versions of the SP up to and include 2.4.3. You can find it here.

A Security Advisory has been issued for all versions of the IdP since 2.1.0, you can read it here.

SP version 2.4.3 was released on July 6, 2011. This release contains bug fixes, and for some platforms distributes a fix for security advisory 20110706.

• Shibboleth Community Calls
  As part of our efforts to support our growing community around the globe, the Shibboleth project team is initiating a series of monthly calls. The calls are open to anyone in the Shibboleth world. Full logistics and agenda will be sent to the users mailing list a week prior to each call.

• No current events
• Shibboleth Past Events...