Blog from January, 2017

A Progress Report on the Migration to Shibboleth IdP V3

You’ve probably heard by now that Shibboleth IdP V2 reached end-of-life on July 31, 2016. Going forward, no bug fixes—not even security-related bug fixes—will be issued by the Shibboleth Project. In other words, Shibboleth IdP V2 is unsupported software.

Shibboleth IdP operators in the InCommon federation and other federations around the world are actively Upgrading to Shibboleth IdP V3. This article summarizes the progress of that effort over the last six (6) months.

All statistics in this article were compiled on January 2, 2017.

Here are some interesting facts:

  • Nearly 90% of the IdPs registered by InCommon are Shibboleth IdPs

  • Three-fourths of the world’s IdP deployments are based on the Shibboleth software

  • Four federations deploy three-fourths of the world’s Shibboleth IdPs

  • The same four federations account for three-fourths of the Shibboleth IdP V3 deployments worldwide

  • More than half (23/40) of the world’s federations each deploy fewer than three (3) Shibboleth IdPs

  • Fifteen federations deploy no Shibboleth IdPs whatsoever

Read on for details!

Shibboleth IdPs in InCommon Metadata

Nearly 90% of the IdPs registered by InCommon are Shibboleth IdP deployments

Of the 451 IdPs registered by InCommon, 403 (89%) are Shibboleth IdPs. Of these, 226 (56%) are Shibboleth IdP V3 deployments.

 InCommon metadata
2017-01-02
Number of Shibboleth IdPs403 (89%)
Number of non-Shibboleth IdPs48
Total number of IdPs451
 InCommon metadata
2017-01-02
Number of Shibboleth IdP V3226 (56%)

Number of Shibboleth IdP V2

149 (37%)
Number of Shibboleth IdP V?28 (7%)
Total number of Shibboleth IdPs403

In the last six (6) months, the number of V3 IdPs registered by InCommon has increased from 125 to 226. As a percentage, V3 deployments increased from 32% to 56% over the same time period.

 InCommon metadata
2016-06-27
InCommon metadata
2017-01-02
Number of IdPs433451
Number of Shibboleth IdPs389 (90%)403 (89%)
Number of Shibboleth IdP V3125 (32%)226 (56%)

For more information: Lists of Shibboleth IdPs Registered by InCommon

Now let’s take a look at global migration activity by examining eduGAIN metadata.

Shibboleth IdPs in eduGAIN Metadata

Four federations deploy three-fourths of the world’s Shibboleth IdPs:

UK459
US381
FR263
BR169

Of the 2262 IdPs in eduGAIN metadata, 1690 (75%) are Shibboleth IdPs. Of these, 818 (48%) are Shibboleth IdP V3 deployments.

 eduGAIN metadata
2017-01-02
Number of Shibboleth IdPs1690 (75%)
Number of non-Shibboleth IdPs572
Total number of IdPs2262
 eduGAIN metadata
2017-01-02
Number of Shibboleth IdP V3818 (48%)

Number of Shibboleth IdP V2

696 (41%)
Number of Shibboleth IdP V?176 (11%)
Total number of Shibboleth IdPs1690

In the last six (6) months, the number of V3 IdPs in eduGAIN metadata has increased from 397 to 818. As a percentage, V3 deployments have nearly doubled over the same time period, increasing from 25% to 48%.

 eduGAIN metadata
2016-06-27
eduGAIN metadata
2017-01-02
Number of IdPs21342262
Number of Shibboleth IdPs1603 (75%)1690 (75%)
Number of Shibboleth IdP V3397 (25%)818 (48%)

For a complete analysis, including the number of Shibboleth IdP V3 deployments per registrar, see: Summary of Shibboleth IdPs in eduGAIN Metadata

For More Information

For the latest news and progress, visit this wiki page, which is updated regularly:

All of the data in this article were compiled using the Shibboleth IdP Probe, a script that probes a sequence of Shibboleth IdPs and determines the version of the Shibboleth software used by each deployment. The software can be downloaded from GitHub.