Login into external application and services (Shibboleth)

This service enables a so-called SSO (Single Sign-On) for web applications and federative authentication (login to external services using the account of one’s home institution).

Shibboleth at the Charles University

At the Charles University, Shibboleth is used for the authentication of users. Thanks to Shibboleth, Charles University teachers and students can, with one single account, use applications run both by the Charles University and by external providers. Shibboleth also enables students and teachers from other universities to work with Charles University’s applications if they log in via their home university.

The Charles University is member of eduID.cz , a Czech academic federation of identities administered by CESNET.

Shibboleth is a free open-source middleware for federative web single sign-on based on open standards, especially the SAML. Shibboleth is developed and supported by the Internet2 consortium.

Identity provider

Identity Provider (IdP) is a component which enables Charles University teachers and students establish identity with the service providers.

IdP is operated as part of the Central Authentication Service of the Charles University and it is registered in the eduID.cz and czTestFed federations.

Service providers

Service providers (SP) are applications which enable users use resources after authentication by the means of identity federation.

At the Charles University, service providers are implemented in the following systems: EZproxy, Portál elektronických zdrojů, MetaLib, Aleph, DigiTool, Document Globe, DSpace, Moodle, and Mefanet. All of the abovementioned service providers are part of the eduID.cz federation.

The SFX system is configured for Shibboleth environment. It uses WAYFless links.

Within the eduID.cz, the Charles University uses authentication via Shibboleth for all accessible providers of EIZ: EBSCO, Thomson Reuters, Ovid, Cambridge Journals, ...

Notification of existing limitations

Identity provider

Internet Explorer 6 browser may experience problems with the identity provider.


In order to log out of the Shibboleth context, one closes the browser window. Actual logout is possible on the level of applications – SP.

Timeout for expiry of a Shibboleth session is at the Charles University set at the standard 60 minutes.




Telephone: (+420) 224 491 809

Last change: March 12, 2015 09:43 
Share on: Facebook Share on: Twitter
Share on:  
Your feedback

Computer Science Centre

Charles University

Ovocný trh 560/5

116 36 Prague 1

Czech Republic

Phone: +420 224 491 647


How to find us