Skip to content
SPECIFICTION
Get listed

Shibboleth

shibboleth.net

From $279.50/mo Free plan WindowsmacOSLinuxSelf-hosted
Visit shibboleth.net
Spec score 7.8 #21 of 34 in Single Sign-On Software

What it is

Shibboleth is open-source identity management software for individual organizations and multi-site federations. Its Identity Provider offers single sign-on for complex identity needs, supports multiple authentication systems, and can handle millions of authentication requests per day. Authentication and data handling features are customizable. The Service Provider works with a wide range of web applications, integrates with popular web servers, and provides policy-oriented authorization features. An Embedded Discovery Service helps users choose an Identity Provider from a shorter list and supports screen readers. The Metadata Aggregator verifies signed metadata, filters selected elements, and provides a web service for querying processed metadata. Shibboleth supports SAML 1.1, SAML 2.0, OpenID Connect, and CAS, along with LDAP and Kerberos directory integrations. Built-in MFA and adaptive access are listed, while lifecycle provisioning is not included. The software is free to download and use, with Linux, macOS, Windows, and self-hosted platforms listed. General users can consult wiki documentation, forums, and mailing lists; Consortium members also receive developer Q&A and members-only Slack support. The project recommends Identity Provider version 5.2.2 or later for a May 2026 XML parsing vulnerability.

Spec sheet

Purpose
Shibboleth provides identity management software for individual organisations and multi-site federations.Read 2 Oct 2026 · shibboleth.net
Support
General users can use Wiki documentation, community forums and mailing lists, while Consortium members receive developer Q&A and members-only Slack support.Read 2 Oct 2026 · shibboleth.net
Founded
2000Read 28 Sep 2026 · shibboleth.net
Authentication
The Identity Provider has built-in support for a range of authentication systems and customizable authentication and data manipulation features.Read 2 Oct 2026 · shibboleth.net
Authorization
The Service Provider includes a variety of policy-oriented authorization features.Read 2 Oct 2026 · shibboleth.net
Discovery service
The Embedded Discovery Service lets users select an Identity Provider from a smaller list and supports screen readers.Read 2 Oct 2026 · shibboleth.net
Metadata
The Metadata Aggregator verifies digitally signed metadata, filters specified elements and provides a web service for querying processed metadata.Read 2 Oct 2026 · shibboleth.net
Open source
All Shibboleth software is open source, free and accessible to all.Read 2 Oct 2026 · shibboleth.net
Scale
The Identity Provider handles millions of authentication requests per day.Read 2 Oct 2026 · shibboleth.net
Security updates
The project publishes security advisories and recommends updating the Identity Provider to version 5.2.2 or later for the May 2026 XML parsing vulnerability.Read 2 Oct 2026 · shibboleth.net
Service Provider
The Service Provider works alongside a wide range of web applications and integrates with popular web servers.Read 2 Oct 2026 · shibboleth.net
Single sign-on
Its Identity Provider provides a flexible Single Sign-On solution for complex identity management requirements.Read 2 Oct 2026 · shibboleth.net
Target users
Shibboleth is used by academic institutions, identity federations and commercial organisations worldwide.Read 2 Oct 2026 · shibboleth.net

Plans and prices

Shibboleth software Free Free to download and use Read 2 Oct 2026 · shibboleth.net
Academic/Non-Profit Small $3,354 a year annually Up to 10,000 users Read 2 Oct 2026 · shibboleth.net
Academic/Non-Profit Medium $6,707 a year annually 10,000-50,000 users Read 2 Oct 2026 · shibboleth.net
Commercial Small $6,707 a year annually Revenue up to €10m Read 2 Oct 2026 · shibboleth.net
Academic/Non-Profit Large $10,061 a year annually 50,000+ users Read 2 Oct 2026 · shibboleth.net
Commercial Medium $13,415 a year annually Revenue €10m-€100m Read 2 Oct 2026 · shibboleth.net
NREN/Federation Small $15,244 a year annually Up to 250 IdPs & SPs Read 2 Oct 2026 · shibboleth.net
Commercial Large $26,829 a year annually Revenue €100m+ Read 2 Oct 2026 · shibboleth.net
NREN/Federation Medium $30,488 a year annually 251-750 IdPs & SPs Read 2 Oct 2026 · shibboleth.net
NREN/Federation Large $60,976 a year annually 750+ IdPs & SPs Read 2 Oct 2026 · shibboleth.net

Every Shibboleth plan and price →

Strong points and limits

Strong points

  • Free and open source
  • Supports SAML, OpenID Connect, and CAS
  • Includes LDAP and Kerberos directory integrations
  • Built-in MFA and adaptive access
  • Discovery service supports screen readers

Limits

  • Lifecycle provisioning is not included
  • Consortium members receive additional support channels
  • Project recommends version 5.2.2 or later for a vulnerability

Who it suits

Shibboleth suits academic institutions, identity federations, and commercial organizations that need identity management or single sign-on. Its feature set also addresses multi-site deployments and large authentication volumes.

Verdict

Shibboleth offers a broad identity-management toolkit, from single sign-on to metadata processing and authorization. Check the recommended Identity Provider version and note that lifecycle provisioning is not included.

Where Specifiction places it

Alternatives to ShibbolethAll alternatives →

Ory From $64.17/mo · Free plan 8.9 Visit