# Install shibboleth-sp with Homebrew, apt, Nix, zypper

Shibboleth 2 Service Provider daemon. Version 3.5.2 via Homebrew; verified 2026-06-22.

## Install

```sh
sudo av install brew:shibboleth-sp
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install shibboleth-sp
```

  Evidence: local Homebrew formula metadata

### Linux

- Debian apt (92%):

```sh
sudo apt install libapache2-mod-shib
```

  Evidence: Debian stable package indexes: libapache2-mod-shib from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- Nix (92%):

```sh
nix profile install nixpkgs#shibboleth-sp
```

  Evidence: nixpkgs package indexes: pkgs/by-name/sh/shibboleth-sp/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- zypper (92%):

```sh
sudo zypper install libshibsp-lite12
```

  Evidence: openSUSE Tumbleweed package metadata: libshibsp-lite12 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

## Package facts

- **Package key:** brew:shibboleth-sp
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/shibboleth-sp>
- **Version:** 3.5.2
- **Source summary:** Shibboleth 2 Service Provider daemon
- **Homepage:** <https://wiki.shibboleth.net/confluence/display/SHIB2>
- **Repository:** <https://codeberg.org/Shibboleth/cpp-sp>
- **Upstream docs:** <https://shibboleth.atlassian.net/wiki/spaces/SP3/overview?src=sidebar>
- **License:** Apache-2.0
- **Source archive:** <https://shibboleth.net/downloads/service-provider/3.5.2/shibboleth-sp-3.5.2.tar.bz2>
- **Last updated:** 2026-06-22T14:06:17-07:00
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- mdquery (cli)
- resolvertest (cli)
- shibd (cli)
- mdquery (alias)
- resolvertest (alias)
- shibd (alias)

## Dependencies

- apr
- apr-util
- boost
- httpd
- log4shib
- opensaml
- openssl@3
- unixodbc
- xerces-c
- xml-security-c
- xml-tooling-c

## Build dependencies

- pkgconf

## Uses from macOS

- krb5

## Install behavior

- Post-install hook: not defined
- Service: declared
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 3.5.2
- Package-manager updated: 2026-06-22
- Local data: ok
- Upstream repository: https://wiki.shibboleth.net/confluence/display/SHIB2
- info: Release/tag comparison is only available for GitHub repositories.

## Security Notes

formula declares a Homebrew service.

- **Geiger risk:** orange / medium
- formula declares a Homebrew service


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: /etc/shibboleth/shibboleth2.xml, /opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml

## Credential files

- Unix: /etc/shibboleth/sp-signing-key.pem, /etc/shibboleth/sp-encrypt-key.pem
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** shibboleth-sp
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## Other Package-Manager Records

- Debian apt - libapache2-mod-shib - 3.5.0+dfsg-2+deb13u1: normalized package name match | Debian stable package indexes: libapache2-mod-shib from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Federated web single sign-on system (Apache module) | https://shibboleth.net/
- Debian apt - libshibsp-dev - 3.5.0+dfsg-2+deb13u1: normalized package name match | Debian stable package indexes: libshibsp-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Federated web single sign-on system (development) | https://shibboleth.net/
- Debian apt - libshibsp-doc - 3.5.0+dfsg-2+deb13u1: normalized package name match | Debian stable package indexes: libshibsp-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Federated web single sign-on system (API docs) | https://shibboleth.net/
- Debian apt - libshibsp-plugins - 3.5.0+dfsg-2+deb13u1: normalized package name match | Debian stable package indexes: libshibsp-plugins from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Federated web single sign-on system (plugins) | https://shibboleth.net/
- Debian apt - libshibsp12 - 3.5.0+dfsg-2+deb13u1: normalized package name match | Debian stable package indexes: libshibsp12 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Federated web single sign-on system (runtime) | https://shibboleth.net/
- Debian apt - shibboleth-sp-common - 3.5.0+dfsg-2+deb13u1: normalized package name match | Debian stable package indexes: shibboleth-sp-common from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Federated web single sign-on system (common files) | https://shibboleth.net/
- Debian apt - shibboleth-sp-utils - 3.5.0+dfsg-2+deb13u1: normalized package name match | Debian stable package indexes: shibboleth-sp-utils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Federated web single sign-on system (daemon and utilities) | https://shibboleth.net/
- Nix - shibboleth-sp: normalized package name match | nixpkgs package indexes: pkgs/by-name/sh/shibboleth-sp/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - libapache2-mod-shib - 3.4.1+dfsg-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libapache2-mod-shib from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Federated web single sign-on system (Apache module) | https://shibboleth.net/
- Ubuntu apt - libshibsp-dev - 3.4.1+dfsg-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libshibsp-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Federated web single sign-on system (development) | https://shibboleth.net/
- Ubuntu apt - libshibsp-doc - 3.4.1+dfsg-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libshibsp-doc from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Federated web single sign-on system (API docs) | https://shibboleth.net/
- Ubuntu apt - libshibsp-plugins - 3.4.1+dfsg-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libshibsp-plugins from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Federated web single sign-on system (plugins) | https://shibboleth.net/
- Ubuntu apt - libshibsp11t64 - 3.4.1+dfsg-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libshibsp11t64 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Federated web single sign-on system (runtime) | https://shibboleth.net/
- Ubuntu apt - shibboleth-sp-common - 3.4.1+dfsg-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: shibboleth-sp-common from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Federated web single sign-on system (common files) | https://shibboleth.net/
- Ubuntu apt - shibboleth-sp-utils - 3.4.1+dfsg-2.1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: shibboleth-sp-utils from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Federated web single sign-on system (daemon and utilities) | https://shibboleth.net/
- zypper - libshibsp-lite12 - 3.5.1-2.1: normalized package name match | openSUSE Tumbleweed package metadata: libshibsp-lite12 from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Shared Library for Shibboleth | https://shibboleth.net/


## Related links

- [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [apr](https://www.automicvault.com/pkg/brew/apr/) - Runtime dependency declared by Homebrew.
- [apr-util](https://www.automicvault.com/pkg/brew/apr-util/) - Runtime dependency declared by Homebrew.
- [httpd](https://www.automicvault.com/pkg/brew/httpd/) - Runtime dependency declared by Homebrew.
- [opensaml](https://www.automicvault.com/pkg/brew/opensaml/) - Runtime dependency declared by Homebrew.
- [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew.
- [unixodbc](https://www.automicvault.com/pkg/brew/unixodbc/) - Runtime dependency declared by Homebrew.
- [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew.
- [descope](https://www.automicvault.com/pkg/brew/descope/) - Shares av.db curated category or tags: authentication, cli, identity, identity-access-management, security.
- [opkssh](https://www.automicvault.com/pkg/brew/opkssh/) - Shares av.db curated category or tags: authentication, cli, security, single-sign-on.
- [authoscope](https://www.automicvault.com/pkg/brew/authoscope/) - Shares av.db curated category or tags: authentication, cli, security.
- [clamav](https://www.automicvault.com/pkg/brew/clamav/) - Shares av.db curated category or tags: cli, daemon, security.
- [cyrus-sasl](https://www.automicvault.com/pkg/brew/cyrus-sasl/) - Shares av.db curated category or tags: authentication, cli, security.
- [dexidp](https://www.automicvault.com/pkg/brew/dexidp/) - Shares av.db curated category or tags: authentication, cli, identity, security.
- [google-authenticator-libpam](https://www.automicvault.com/pkg/brew/google-authenticator-libpam/) - Shares av.db curated category or tags: authentication, cli, security.
- [oath-toolkit](https://www.automicvault.com/pkg/brew/oath-toolkit/) - Security-sensitive metadata or terminology overlaps. Shared terms: authentication, cli, openssl, openssl-3, security.

## Combined YAML source

View the package source record on GitHub. [combined/shibboleth-sp.yml](https://github.com/automic-vault/db/blob/main/combined/shibboleth-sp.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
