Internet2 has announced the availability of Shibboleth 1.0, a production version of privacy-preserving Web authorization software. Shibboleth, a project of Internet2/MACE, is developing architectures, policy structures, practical technologies, and an open source implementation to support inter-institutional sharing of Web resources subject to access controls. In addition, Shibboleth will develop a policy framework that will allow inter-operation within the higher education community. Key concepts within Shibboleth include: Federated Administration; Access Control Based On Attributes; Active Management of Privacy; Standards Based; a Framework for Multiple, Scaleable Trust and Policy Sets (Clubs); and a Standard (yet extensible) AttributueValue Vocabulary.
Shibboleth has been tested by more than 20 companies and universities. Shibboleth is standards-based and open source. Blackboard, WebCT and WebAssign, course management software providers, and EBSCO, JSTOR and SFX, online information companies, have already begun to incorporate Shibboleth technology into their products and services. Development of this software was supported with funding from Brown University, Carnegie Mellon University, Columbia University, The Ohio State University, Internet2 and the NSF Middleware Initiative (Cooperative Agreement No. ANI-0123937).