Skip to main content

Scheduled Service Change: Remove CUWebAuth from Shibboleth Identity Provider

Event:
2021-08-01 11:30:00
Expected Duration:
2021-08-01 12:00:00
Status:
Closed
Brief Description:
On Sunday, August 1, 2021, Shibboleth Identity Provider (IdP) will be disconnected from CUWebAuth in support of the upcoming service retirement deadline.
User Impact:
Users will see a new CUWebLogin and Two-Factor login screen when visiting Shibboleth integrated websites.
Services Affected:
Authentication and Authorization
Full Description:
On Sunday, August 1, 2021, Shibboleth Identity Provider (IdP) will be disconnected from CUWebAuth in support of the upcoming service retirement deadline. This change is to ensure a smooth transition and optimal user experience as CUWebAuth will be retired fully on September 30, 2021. As part of the WebSSO Modernization Project, CUWebAuth website administrators are migrating to use Shibboleth IdP for authentication.

After the change on August 1, CUWebAuth- and Shibboleth-enabled websites will have separate login pages. If you connect to the CUWebAuth web application, the authentication token that typically follows you across systems will no longer work, and you will receive a new prompt for other websites using Web Single Sign-On. Additionally, a new CUWebLogin user interface for Shibboleth-enabled websites will be introduced, along with a new Two-Step Login page.

Stay tuned for more project updates. For questions, please contact the Identity Management team(idmgmt@cornell.edu).
CIT TDX ID:
368444



Timeline of Changes

Description Current Status Date Time
On Sunday, August 1, 2021, Shibboleth Identity Provider (IdP) will be disconnected from CUWebAuth in support of the upcoming service retirement deadline. This change is to ensure a smooth transition and optimal user experience as CUWebAuth will be retired fully on September 30, 2021. As part of the WebSSO Modernization Project, CUWebAuth website administrators are migrating to use Shibboleth IdP for authentication. After the change on August 1, CUWebAuth- and Shibboleth-enabled websites will have separate login pages. If you connect to the CUWebAuth web application, the authentication token that typically follows you across systems will no longer work, and you will receive a new prompt for other websites using Web Single Sign-On. Additionally, a new CUWebLogin user interface for Shibboleth-enabled websites will be introduced, along with a new Two-Step Login page. Stay tuned for more project updates. For questions, please contact the Identity Management team(idmgmt@cornell.edu). 2021-06-24 13:58:28