Shibboleth is a behind-the-scenes system that provides secured single sign-on access to web applications at Tufts and, via the InCommon Federation (http://www.incommon.org/), at external institutions.
Benefits and Features
There are two aspects to Shibboleth which provide separate benefits to the Tufts Community: InCommon Federation and single sign-on.
Tufts is a member of the InCommon Federation, a group of 400+ higher education and research institutions that trust each other's authentication systems. This means that members of the Tufts community can use their Tufts Username and Tufts Password to gain access to websites at other universities and research institutions who are also part of the InCommon Federation. Please be sure you have read and understand the Information Stewardship Policy prior to accessing external sites using your Tufts credentials.
Shibboleth is also used by Tufts University websites and web applications to provide single-sign on access. You need only log on once and you will gain access to all Shibboleth-configured websites for which you have been authorized.
- Collaboration between institutions
- Only need to enter your Tufts Username and Tufts Password once
- Extended privileges to certain collaboration sites using your institutional logon rather than a private or social logon
Using your Tufts Username and Tufts Password to access external institutions’ sites supported by InCommon Federation members may require the transmission of certain directory information (name, email, affiliation, Tufts Username, telephone number). Every InCommon member has signed, and is bound to, a Participation Agreement which dictates that no identity information will be permanently stored, shared or disclosed without express written consent. Do not use the service if you do not wish to send your directory information.
You must have an active Tufts Username and Tufts Password to access Shibboleth-configured web applications within Tufts or other InCommon Federation higher education institutions.
When you attempt to access a Shibboleth-configured website – either within Tufts or via an InCommon member – you will be redirected to Tufts’ Shibboleth login page shown here. Note: external sites may require you to first identify your institution (Tufts University) from a drop down list.
At the Shibboleth login page, you will need to enter your Tufts Username and Tufts Password. While you have an active authentication session, subsequent Shibboleth-configured websites will not prompt you for your credentials; the websites will know that you’ve already authenticated. These sessions will last for 8 hours, or until you log out of all Shibboleth-configured websites – whichever comes first.
Additional information about Shibboleth and the InCommon Federation: