The GridShib-CA allows a user to authenticate using SAML (Shibboleth) or OpenID, and then creates and installs a short-lived certificate based on that authentication on the user's local system. This certificate is suitable for use with tools such as the Globus Toolkit and GSI-OpenSSH.

Version 2 is the latest stable release of GridShib-CA.  Version 1, an older release of GridShib-CA, is also available.

The GridShib-CA is used in go.teragrid.org and cilogon.org.