Version 3 of Shibboleth Identity Provider (IdP) software was released ea= rlier this year, replacing the popular V2 version which completed an end-of= -life process on July 31, 2016. No further security updates or bug-fixes wi= ll be provided for Shibboleth Version 2.X.
The CCC Technology Center (CCCTC) is upgrading the OpenCCC student gatew= ay IdP (Shibboleth v.2.4.1, to version 3.1) on September 30 as part of a pl= anned mid-year release (5.5). The CCCApply staff IdP - which provides = staff single sign-on (SSO) capability to the CCCApply Administrator and CCC= Report Center, - is also being upgraded to version 3.1.
CCC= TC Recommends Upgrade to Shibboleth V3
Colleges using Shibboleth will need to verify which version they a= re using and if using version 2.X, should consider upgrading to the latest = version. Shibboleth V2 will become an unsupported version, and while upgrading to V3 is not required, it is strongly reco= mmended. See below for more information on the benefits and r= equirements of upgrading the Shibboleth version 3 today!
Assistance is avail= able for colleges that need help upgrading to V3. For = more information, please contact Patricia Donohue, Product Manager, pdonohue@ccctechcenter.org.
Upgrade to Shibboleth Version 3 Today!
Colleges participating in one or more of the statewide technology initia= tives will need to go through a readiness process to ensure that their camp= us system is compatible with the statewide IdP. This includes aligning the = IdP and associated applications to support integration with statewide authe= ntication services (SSO) for students and staff.
Colleges that have only one IdP configured for staff (i.e. Shibboleth 2.= X for the CCCApply Administrator & Report Center) will be required to u= pgrade to Shibboleth version 3 in order to facilitate authentication capabi= lity for students, as well as admins and staff .
Failure to upgrade to the latest version 3.X of the Shibboleth IdP could= result in students losing access to secure CCC web applications within the= CCC SSO Initiative, including the new student services portal, MyPath; the= common assessment system, CCCAssess; the Hobson's suite of Ed Planning too= ls; and Canvas, the statewide course management system (CMS).
Benefits of Upgradin= g
The CCCTC recommends that all colleges using Shibboleth Identity Provide= r software upgrade to the latest version 3.X in order to take advantage of = the many benefits and enhancements it provides:
- Improved security
- Ease of use and configuration
- Decrease in Help Desk calls - fewer passwords to remember
- Increased student productivity
- Inter-operability and integration with= CCC applications
Get Started on Shibboleth Upgrade
Colleges can choose to upgrade Shibboleth on their own (DIY), or work wi= th an approved vendor on this implementation.
NOTE: Working with an approved vendor may affect your project timeline. = Vendors are working with colleges on a first-come, first-serve basis; howev= er project pilot colleges may be prioritized depending on the project timel= ine. Find out more about working with an approved vendor to facilitate your= Shibboleth Upgrade. Contact Patricia Donohue, Product Manager, pdonohue@cc= ctechcenter.org.
If your college is not using Shibboleth Identity Provider software, there a= re other steps you may need to take to ensure your system is compatible wit= h the statewide IdP. Colleges using PortalGuard and other IdP solutions wil= l need to go through a readiness checklist process to ensure they meet the = requirements for student authentication per the CCC SSO Initiative. To unde= rstand the readiiness requirements for your IdP, please contact Matt Schroe= der, System Engineer, mschroeder@ccctechcenter.org.
Do you have more questions?
Additional information is available for the Shibboleth V3 upgrade and th= e CCC SSO Initiative. If you are a pilot college for a CCC technology initi= ative, please contact your Project Manager. You can also contact Patricia D= onohue, pdonohue@ccctechcenter.org, for assistance, or= post a comment or question on CCCTechnology.info.