Shibboleth Error Message Received at Log In

Environment

Single Sign On, Shibboleth

Issue

Shibboleth authentication errors can occur for several reasons and you may receive one when logging in to U-M services.

Resolution

Consider your individual University role and follow the information below to help work through some common causes for Shibboleth errors.

If you are logging in with a University of Michigan Friend Account:

  • Some U-M services do not accept Friend Account login
    • Consider whether you have a U-M uniqname you can use instead
      • Not everyone is eligible for a U-M uniqname
      • Some new students use a Friend Account until they receive a uniqname

If you are logging in with a University of Michigan uniqname:

  1. Consider whether your role is eligible for the service you are attempting to log into
    • Parents cannot log in to Student pages Students cannot log in to Employee pages unless they are also employees
    • Students cannot log in to Employee pages unless they are also employees
  2. Make sure your role is in place before attempting login
    • New hires must wait until their effective/start date before accessing Employee Self Service
    •  Student applicants must wait to be admitted before accessing Student Business
  3. Look for contact information on the service page itself, not on the Shibboleth error alert
    • Your page may or may not be owned and operated by ITS
      • If it is not, ITS will not be able to diagnose the trouble

Additional Information

Need additional information or assistance? Contact the ITS Service Center.

Details

Article ID: 11261
Created
Wed 11/29/23 1:40 PM
Modified
Wed 12/13/23 8:51 AM