UCSD Shibboleth Configuration Files

This tool generates Shibboleth configuration files based on the information you enter and the UCSD enviroment. The files are packaged into a zip archive for download, which should be extracted in your Shibboleth SP install directory.

Please refer to the Shibboleth Guide for how to customize and utilize the resulting files.

Shibboleth version

3.x

Server OS

Apache IIS

IIS site instance ID

The instance ID of the web site. This value is only required if you are using IIS as your web server.

Tomcat

Tomcat Check if using Apache Tomcat with the AJP connector

Host name

The public host name of your site. If running Apache, this should match the ServerName in httpd.conf.

Entity ID

A unique identifier for your server. This usually follows the pattern https://yourhostname.ucsd.edu/shibboleth-sp -- if generating a new config for an existing server copy and paste the entityID from your existing shibboleth2.xml.

Secured directory

The virtual path to protect. To protect the entire site, enter / or leave this blank. To protect multiple paths, separate them with semicolons.

Authenticators

Student PID/PAC Business Systems Active Directory Pick which authenticators your site should accept. If different parts of the site need different authenticators, the file will need to be manually adjusted.

Support email

The support contact email is displayed on Service Provider error pages.