InCommon Operations Notifications

[Thomas Scavo <>]

Last week you received a message about the end of life for version 2 of the 
Shibboleth Identity Provider software, which occurs on July 31, 2016. Since 
version 2 will no longer be supported, with no security upgrades or patches, 
all Identity Provider operators should have a plan for upgrading to version 3.

Shibboleth Identity Provider software download: 
http://shibboleth.net/products/identity-provider.html 
Guidance from InCommon: https://spaces.internet2.edu/x/GYtHBQ

While security is the main reason for upgrading (as well as moving away from 
code that will become even more obsolete as time goes on), there are a number 
of interesting features offered in version 3. These include:

- Improved upgrade and patching process
- Expanded authentication options
- Native CAS protocol support
- Advanced per-SP configuration options
- User consent (based on the uApprove feature set)
- and many more

See: https://wiki.shibboleth.net/confluence/display/IDP30/InterestingFeatures 

If you or others in your organization have technical or policy questions 
about Shibboleth IdP V3, InCommon will host two “Office Hour” sessions by 
members of the Shib training team:

1. Thursday, July 7, 3:15 pm - 4:15 pm EDT
2. Tuesday, July 12, 11:30 am - 12:30 pm EDT

You are welcome to drop in during Office Hours and ask questions at your 
convenience. Details and connection information are here: 
https://spaces.internet2.edu/x/FILmBQ

InCommon is tracking the upgrade status of deployments throughout the 
Federation. To date, 118 of the 386 Shibboleth IdPs deployed in InCommon have 
upgraded.  Please let us know when we can add your IdP to our Shibboleth IdP 
V3 Hall of Fame! https://spaces.internet2.edu/x/8QCoBQ 

----
Tom Scavo
For InCommon Operations