Managed Shibboleth

Identity Provider: in the hands of the organisation which is using the system

Service Provider: in the hands of the provider

Localisation provider or discovery service: can be used optionally
to localise the user's organisation

The open-source project Shibboleth is characterised by the fact that access control is based on attributes, and that it is a framework for multiple, scaleable policy and trust implementations. Users receive one account which allows them to access a multitude of services.

Components can be installed independently of each other. For Shibboleth to work, the minimum requirement consists of an identity provider and a service provider.