Page tree
Skip to end of metadata
Go to start of metadata

The University of North Carolina at Charlotte utilizes the Shibboleth Identity Provider software in order to facilitate a unified (single sign-on) experience for web based authentication. This software is an open-source project supported and maintained by leading education organizations. By promoting a single standard for web authentication on campus, this service provides a familiar experience users can easily identify and trust. 

Federations

InCommon 

UNC Charlotte is a member of InCommon, an organization operated by Internet2. The InCommon Federation is the U.S. education and research identity federation, providing a common framework for trusted shared management of access to on-line resources. Through InCommon, Identity Providers can give their users single sign-on convenience and privacy protection, while online Service Providers control access to their protected resources.

UNC General Administration

As an institution belonging to the University of North Carolina system, we participate in the UNC Identity Federation along with all 17 constituent institutions of UNC. The ultimate goal of the Federation is to facilitate the optimization of service delivery and minimize the duplication of resources across the campuses by providing the trust fabric and technical architecture required to exchange authentication credentials and identity attributes in a secure manner.


Supported Protocols

Shibboleth can support both CAS and SAML2 protocols for single sign-on authentication. Which protocol to use will depend on the application requirements of the service provider. 

  • SAML2 can return more attributes than CAS, but Shibboleth is more complex to set up than CAS.
  • CAS can return only the ninernet (uid) attribute which may be sufficient if your service doesn't rely on other attributes, or if you plan to retrieve required attributes using another method (e.g., querying LDAP). 




Search this documentation


  • No labels