Page History

A server certificate, issued either by the MIT CA or a commercial CA, is required for SSL (https) traffic to your server; we strongly recommend using SSL for all Shibboleth-protected content. Please make sure that you use lower case server names in your certificate request. The server name within the certificate is case sensitive.

Information about how to generate a certificate request and where to send the request can be found in https://wikis.mit.edu/confluence/display/WSWG/How+to+acquire+and+verify+a+M.I.T.+x509+Server+Certificate

An While some MIT SPs currently use their MIT-issued server certificate can also be used by the Shibboleth SP when it with Shibboleth (when Shibboleth authenticates to an IdP), though we will be are transitioning to using a separate, self-signed certificate for that purpose, so new installs must
generate and provide us with that certificate. Please see below for details.