---
type: source
title: "URZ: Shibboleth"
tags: [authentication, sso, university-services]
related: [shibboleth, central-authentication-and-authorization, single-sign-on, identity-card]
created: 2026-06-30
updated: 2026-06-30
sources: ["output/rz_uni_greifswald_de_dienste_allgemein_shibboleth.md"]
---

# URZ: Shibboleth

This source describes the implementation of the Shibboleth authentication and authorization service provided by the Universitätsrechenzentrum (URZ) at the Universität Greifswald.

## Key Functions
- **Centralized Access**: Allows university users to access various web applications and services using their [[zentraler-nutzeraccount]].
- **VPN Elimination**: Enables browser-based authentication for external access to licensed databases and online publications, removing the previous requirement for a VPN connection.
- **Privacy Control**: Implements an "Identity Card" system where users must confirm the specific data being transmitted to a service provider before access is granted.
- **Single-Sign-On (SSO)**: Once authenticated, users can access multiple independent service providers without re-entering credentials.

## Service Integration
- **External Services**: Primarily used for licensed databases provided by the [[universitatsbibliothek-ub]].
- **Internal Services**: The URZ is expanding Shibboleth integration to internal platforms, including [[lsf]] (Online Course Catalog) and [[moodle]] (Teaching Platform).

## Limitations
- **Single-Sign-Out**: Currently not implemented. Users must close their browser or delete cookies to terminate a session.

## Support
Technical issues are handled via the [[groupware]] ticket system or the URZ hotline.