Possible action required - Test applications in preparation for Shibboleth change on April 18

Summary

• Yale ITS will upgrade Shibbloleth on Sunday, April 18.
• Possible action required: Individuals responsible for SAML-protected applications must test their applications before Sunday, April 18. We have created an alternate upgraded Shibboleth Identity Provider (IdP) for this purpose.

Details

Yale ITS will upgrade Shibbloleth from version 3.3 to version 4.0 on Sunday, April 18.

Overview

Shibboleth is Yale’s Identity Provider (IdP) that supports SAML integration for single sign-on with vendor applications like Workday, Service Now, etc. Yale’s current Shibboleth version of 3.3 has been out of community support since December 2020. This change will upgrade Shibboleth to version 4.0.

We expect the upgrade to be seamless and transparent to the service providers. As with any change, there is always a chance that the upgrade might have some unforeseen impact.

Possible action required

• It is crucial that all individuals responsible for SAML-protected applications with the new version of Shibboleth and address any issues as soon as possible. View testing instructions on the Confluence page below.

Need help?

We have created a Confluence page with additional details about this change, including testing instructions.

Please direct questions and issues to the Identity and Access Management (IAM) team.

CHG0077342