Version 3 of Shibboleth Identity Provider (IdP) software was released earlier this year, replacing the popular V2 version which completed an end-of-life process on July 31, 2016. No further security updates or bug-fixes will be provided for Shibboleth Version 2.X.
The CCC Technology Center (CCCTC) is upgrading the OpenCCC student gateway IdP (Shibboleth v.2.4.1, to version 3.1) on September 30 as part of a planned mid-year release (5.5). The CCCApply staff IdP - which provides staff single sign-on (SSO) capability to the CCCApply Administrator and CCC Report Center, - is also being upgraded to version 3.1.
CCCTC Recommends Upgrade to Shibboleth V3
Colleges using Shibboleth will need to verify which version they are using and if using version 2.X, should consider upgrading to the latest version. Shibboleth V2 will become an unsupported version, and while upgrading to V3 is not required, it is strongly recommended. See below for more information on the benefits and requirements of upgrading the Shibboleth version 3 today!
Assistance is available for colleges that need help upgrading to V3. For more information, please contact Patricia Donohue, Product Manager, pdonohue@ccctechcenter.org.
Upgrade to Shibboleth Version 3 Today!
Colleges participating in one or more of the statewide technology initiatives will need to go through a readiness process to ensure that their campus system is compatible with the statewide IdP. This includes aligning the IdP and associated applications to support integration with statewide authentication services (SSO) for students and staff.
Colleges that have only one IdP configured for staff (i.e. Shibboleth 2.X for the CCCApply Administrator & Report Center) will be required to upgrade to Shibboleth version 3 in order to facilitate authentication capability for students, as well as admins and staff .
Failure to upgrade to the latest version 3.X of the Shibboleth IdP could result in students losing access to secure CCC web applications within the CCC SSO Initiative, including the new student services portal, MyPath; the common assessment system, CCCAssess; the Hobson's suite of Ed Planning tools; and Canvas, the statewide course management system (CMS).
Benefits of Upgrading
The CCCTC recommends that all colleges using Shibboleth Identity Provider software upgrade to the latest version 3.X in order to take advantage of the many benefits and enhancements it provides:
- Improved security
- Ease of use and configuration
- Decrease in Help Desk calls - fewer passwords to remember
- Increased student productivity
- Inter-operability and integration with CCC applications
Get Started on Shibboleth Upgrade
Colleges can choose to upgrade Shibboleth on their own (DIY), or work with an approved vendor on this implementation.
NOTE: Working with an approved vendor may affect your project timeline. Vendors are working with colleges on a first-come, first-serve basis; however project pilot colleges may be prioritized depending on the project timeline. Find out more about working with an approved vendor to facilitate your Shibboleth Upgrade. Contact Patricia Donohue, Product Manager, pdonohue@ccctechcenter.org.
If your college is not using Shibboleth Identity Provider software, there are other steps you may need to take to ensure your system is compatible with the statewide IdP. Colleges using PortalGuard and other IdP solutions will need to go through a readiness checklist process to ensure they meet the requirements for student authentication per the CCC SSO Initiative. To understand the readiiness requirements for your IdP, please contact Matt Schroeder, System Engineer, mschroeder@ccctechcenter.org.
Do you have more questions?
Additional information is available for the Shibboleth V3 upgrade and the CCC SSO Initiative. If you are a pilot college for a CCC technology initiative, please contact your Project Manager. You can also contact Patricia Donohue, pdonohue@ccctechcenter.org, for assistance, or post a comment or question on CCCTechnology.info.