Add Identity Provider

Required Steps

1. For your identity provider (IdP) to appear in the list at https://cilogon.org, please register your IdP with InCommon or another eduGAIN member federation. CILogon updates its list of identity providers automatically from InCommon federation metadata.

2. For your IdP's users to successfully authenticate to CILogon, please release a subject-id and/or eduPersonPrincipalName attribute to CILogon that uniquely identifies the authenticated user. Be sure that the attributes use your IdP's registered scope value(s).

3. Please test authentication to CILogon using your IdP at https://test.cilogon.org/testidp/.

Recommended Steps

For improved access and ease-of-use for your IdP's users, please also complete the following recommended steps:

4. Please configure your IdP to support the personalized entity category and/or the research and scholarship entity category to provide basic user attributes to CILogon. Some CILogon integrations require IdPs to include the http://refeds.org/category/research-and-scholarship tag in metadata. See: InCommon R&S Documentation

5. Please ensure that your IdP conforms to the Security Incident Response Trust Framework for Federated Identity (Sirtfi). Some CILogon integrations require IdPs to include the https://refeds.org/sirtfi tag in metadata. See: InCommon Sirtfi Documentation

6. Please configure your IdP to support the REFEDS Multi-Factor Authentication profile. Some CILogon integrations require IdPs to include an AuthnContextClassRef containing https://refeds.org/profile/mfa to indicate that the user performed multi-factor authentication.

Additional Details

CILogon's entityID is "https://cilogon.org/shibboleth". Please obtain CILogon's SAML metadata from your federation. InCommon members should use InCommon metadata. For reference, the CILogon metadata can be manually downloaded from InCommon at: https://mdq.incommon.org/entities/https%3A%2F%2Fcilogon.org%2Fshibboleth 

Questions? Please see our FAQ or contact us at help@cilogon.org.

CILogon also supports authentication from several third-party identity providers including Google, GitHub, ORCID, and Microsoft. You can create a free account at any of these providers for use with CILogon.

Are you interested in using CILogon for your organization or project? Please see CILogon subscriptions for details on CILogon pricing and service agreements.