Shibboleth SSO: Why World’s Top Fortune-500 Businesses, Universities, and Public Sector Organizations have already Adopted it.
Shibboleth is the fastest-growing, open-source, middleware for implementing secure federated identity and single sign-on (SSO) authentication in the Enterprise. Shibboleth provides SSO login authentication and access security for users to cloud applications. One single login password for each user gives the user authorized access to all cloud Apps without sharing user credentials with the Apps (or the App vendors).
Shibboleth SP leverages existing Enterprise Identity and Authentication (IAM) System, such as Active Directory, LDAP, and others, and extends the authentication for Users to the Cloud Apps. It does not replace the existing enterprise IAM system, it simply extends it. So, it is very easy to deploy and manage. It can be deployed either on-premises or in the cloud.
Open Source Implementation
Shibboleth SSO is the most widely deployed, open-source implementation of SAML, CAS, OIDC, and ADFS standards-compliant Single Sign-On (SSO) federated identity and access management security middleware.
Shibboleth Market Acceptance
Shibboleth middleware has been around for over 20+ years and was originally sponsored and developed by the United States National Science Foundation and Internet2. It has been deployed by Enterprise and Public Sector organizations worldwide. Each year since its initial launch, it has been tested and reviewed for security, as well as, interoperability by independent security experts worldwide. This is the reason Shibboleth remains the most robust, powerful, and innovative single sign-on authentication middleware.
Shibboleth leverages existing enterprise IAM infrastructure
Shibboleth single sign on plugs into existing enterprise identity provider, management and authentication systems such as Active Directory, CAS, LDAP, SQL, NTLM, Kerberos, SPNEGO, and others. This lowers the barriers to adoption.
PKI-Trust based Strong Security
Shibboleth is a robust PKI trust-based IT security middleware. It has been reviewed and tested for more than 15+ years by organizations and experts from around the world. It is not a black box technology that is solely dependent on any one single vendor.
Shibboleth SSO and Interoperability
Shibboleth inter-operates with other third party SSO middleware such as Microsoft ADFS. So customers are able to deploy end-2-end federated SSO that works across all enterprise Apps.
Shibboleth and Open-Standards
Shibboleth implements the most widely used single sign-on (SSO) standard called SAML. In addition, to SAML, it also implements the CAS, ADFS, and OIDC standards. It, therefore, is the most complete federated identity security middleware in the market.
Shibboleth compatible Cloud Apps
Shibboleth has the largest number of enterprise cloud Apps (5,500+) that are compatible with it and therefore provide seamless interoperation. In the world of SSO authentications and access management, interoperability requires a highly robust and flexible attribute mapping system which Shibboleth supports. This helps in accomodating a large number of existing Apps, and reduces the risk of non-interoperation with future new Apps.
No User-Training Required
Shibboleth does not require any user training or installation of any software on the user’s computing device. Once Shibboleth is deployed on the server for the enterprise, everything works as before. The only difference users see is that they no longer need to input their passwords multiple times for accessing different applications, great UX for end-users.
Shibboleth is widely adopted and deployed in multiple markets, such as Public Sector, Telecom, Healthcare, Higher Education, K-12, Finance, Insurance, Automotive, Retail, E-Commerce, and others. This allows different market actors to set up seamless collaborations and partnering with each other, as their Users access each other’s online Apps with ease while providing enterprise-grade security and access management.
Shibboleth is Commercially Supported
Leading Adopter Testimonial
Here is how a leading CIO of a major University recently summed up why Higher-Education IT Departments are adopting Shibboleth.SSO over any other alternative
NO commercial (non-Shibboleth) product supports EDU identity federation frameworks. I know some campuses that have walked away from the Ellucian and other competitive products because, while they support SAML, they do NOT support SAML as used with the worldwide higher education community. With fifteen years of experience with SAML, the Higher Ed community has developed a set of “deployable practices” that go beyond the basic protocol and significantly simplify the process of managing the use of SAML.