Shibboleth
Shibboleth: A standards-focused, free SSO foundation for teams comfortable managing identity infrastructure. Ranked #12 of 32 in Single Sign-On Software by our editors (8.2/10); pricing: Free plan; best for organizations needing standards-based federation.
At a glance
- Editor score8.2 / 10
- PricingFree plan
- Best forOrganizations needing standards-based federation
- Free planYes
- Paid fromFree
- Lifecycle provisioningNone
- Founded2000
- Facts checked20 Sep 2026
Where it wins
- Free, open-source software with Windows, macOS, and Linux support
- Supports SAML, CAS, LDAP, MFA, metadata management, and federation
- Can operate as both an Identity Provider and Service Provider
Where it doesn't
- Lifecycle provisioning is not part of its category specification
- OpenID Connect provider support requires an official plugin
- Consortium membership is separate from the free software
Our verdict on Shibboleth
Shibboleth is open-source identity management software for organizations, academic institutions, identity federations, and commercial environments. It supports federated single sign-on through Identity Provider and Service Provider deployments, connecting users with protected applications and applying authorization policies. The software runs on Windows, macOS, and Linux, making it suitable for teams that need a standards-based identity layer across varied infrastructure.
The pricing model is straightforward: the Shibboleth software is free and open source. The published pricing structure lists optional Shibboleth Consortium membership fees rather than per-user product plans. Membership supports maintenance, development, and priority support, so organizations can adopt the software without a recurring per-user license while choosing whether additional Consortium support fits their operating model. This structure is more suitable for organizations with identity expertise than for buyers seeking packaged subscription tiers.
Shibboleth’s strongest area is protocol and federation depth. It supports SAML 1.1, SAML 2.0, CAS, LDAP authentication, Kerberos directory integration, configurable multi-factor authentication flows, and adaptive access. Metadata aggregation includes filtering, signing verification, and querying, while Embedded Identity Provider Discovery helps users select an identity provider. OpenID Connect provider support is available through an official plugin. Organizations should choose Shibboleth when federation control, open-source access, and standards support matter most; teams prioritizing lifecycle provisioning or a more managed application experience should consider alternatives.
Your product? Our editors can test Shibboleth in depth and publish a review, labelled as paid · from $149/mo →
Shibboleth pricing
Shibboleth fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| SSO protocols | SAML 1.1, SAML 2.0, OpenID Connect, CAS |
| Directory integrations | LDAP, Kerberos |
| Lifecycle provisioning | None |
| Built-in MFA | Yes |
| Adaptive access | Yes |
| Prebuilt app count | Not verified |
| Deployment | Desktop |
| Platforms | Windows, macOS, Linux |
| Pricing | Free plan (source) |
| Website | shibboleth.net |
| Facts checked | 20 Sep 2026 |
Alternatives to Shibboleth
- authentikFlexible self-hosted SSO with a free open-source edition and paid access controls.9.4
- WSO2 Identity ServerA broad, self-hosted IAM platform for enterprise SSO, federation, MFA, and API security.9.2
- KeycloakA broad, open-source SSO server for teams that want to run identity infrastructure themselves.9.1
See all Shibboleth alternatives →
Used Shibboleth? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Shibboleth for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Shibboleth is listed in our Single Sign-On Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/shibboleth/"><img src="https://www.itechguides.com/best/badge/shibboleth.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update