Skip to main content
Carnegie Mellon University
Office of the CIO  ›  Computing Services  ›  Services  ›  Security Services  ›  Identity and Access Management  ›  Authentication Services  ›  How to Use 2fa Authentication  ›  Set Up and Install Web Login

Set Up and Install Web Login

Information included on this page will help you set up your Apache or Windows server and install Shibboleth technology for Single Sign-On through Web Login.

Review the list of supported operating systems (Windows or Linux), and then follow these steps to set up Apache or Windows with SSL (HTTPS):

  1. Shibboleth protected web pages should also be protected with TLS/SSL encrypted connections; for this you need an SSL certificate. Request a certificate using the CMU CA.
    Note: Shibboleth utilizes a self-signed certificate internally. This certificate is different from the TLS/SSL web server certificate and is created by Shibboleth software itself.
  2. Follow your operating system's installation instructions to install the certificate received from the Certificate Authority for the web server.
  3. To obtain an encrypted connection, visit https://HOSTNAME/.
    Note: Be sure to use "https" and not "http". You must establish an encrypted connection to your server in order to continue.

Follow the appropriate links to install Shibboleth and download necessary files. 

RPM-based system OR Compile from Source

    1. Installation steps Wiki Shibboleth (Linux).
    2. Download CMU Shibboleth configuration template cmu-shibboleth2-linux.xml

Windows

    1. Installation steps Wiki Shibboleth (Windows)
    2. Download CMU Shibboleth configuration template cmu-shibboleth2-windows.xml
After completing these instructions, continue to the Configure Web Login instructions.