Existing IDPv3 installation
In case you're still running a Shibboleth IDPv3 in eduID.at you must upgrade to IDPv4 by installing the v4 software over your v3 software.
The upgrade instructions of the Shibboleth IDPv4 software make it very clear that this is the only supported way to get from IDPv3 to v4.
That also entails first upgrading your IDPv3 to the latest/last IDPv3 release and cleaning up/modernising your configuration until no more "DEPRECATED
" messages are shown in your IDP's log files.
Make sure to review the relevant documentation before doing so, particularly:
- System Requirements (Java 11 and Tomcat 9 as supplied by Debian 11 are still OK)
- Upgrading
- Release Notes (Esp. the warning in section "Attribute-Related Changes" about duplicate attributes when not following the other instructions)
- Installation
You're free to rebuild your IDP server from scratch (using the current Debian "stable" version, as always) but instead of also installing a "clean" version of IDPv4 you copy over your IDPv3 installation (/opt/shibboleth-idp
) to the new server and only then install IDPv4 to the same location. (Of course you may copy more stuff over, such as your Tomcat configuration and TLS keystore, etc.)
Completely new IDP installation
In case you have not been running a Shibboleth IDP in eduID.at so far you can install a "fresh" instance of IDPv4.
The instructions we provide should get you up and running as quickly as possible.