Shibboleth Support

General Assistance

Contact the ITS Service Center with questions about logging in to any U-M Weblogin resource, including those that use Shibboleth.

For general information about Weblogin at U-M, see Using Web-Authenticated Resources (Weblogin Using Cosign) at U-M.

Logging in to a Shibboleth-Enabled Service

For members of the U-M community, logging in to a Shibboleth-enabled service (such as U-M Google or U-M Box) looks similar to logging in through U-M Weblogin. To learn more about how it works, see Logging in to Shibboleth-Enabled Services and Websites, which describes what happens when you log in to a Shibboleth-enabled service provided by U-M or the InCommon Federation.

Logging Out of a Shibboleth-Enabled Service

Multiple sessions may be active when a person uses Shibboleth, so managing logout can be complicated. After authenticating, a user may have active sessions with the web application, the Service Provider (SP), and the Identity Provider (IdP).

When a user clicks a logout button in an SP's web application, their web application and SP sessions are ended, but they are not usually logged out of the IdP. Closing the browser may not end the IdP session. If the user revisits the web application, they are automatically re-authenticated because they still have a valid IdP session cookie.

For more about Shibboleth and logging out, see

Configure Shibboleth Authentication for Your Service

U-M departmental IT staff can follow the steps below to make a web resource available as a Service Provider (SP) using Shibboleth authentication.

  1. Register your Service Provider:

    1. Submit the Shibboleth Configuration Request Form. Depending on the complexity of your request, it may take several weeks or more to complete. Please submit your request as early as possible.

    2. If your Service Provider requires release of attributes that are not pre-approved, submit the Shibboleth Attribute Release Request Form. See Shibboleth Attribute Release Policy and Procedure for details.

  2. Configure your Service Provider:

Configuration Assistance

Additional assistance for U-M IT staff members:

Additional Shibboleth Resources