The GridShib-CA allows a user to authenticate using SAML (Shibboleth) or OpenID, and then creates and installs a short-lived Grid credential based on that authentication on the user's local system. This credential is suitable for use with Grid Tools such as the Globus Toolkit and GSI-OpenSSH.

Version 2 is the latest stable release of GridShib-CA.  Version 1, an older release of GridShib-CA, is also available.

The GridShib-CA is used in go.teragrid.org and the planned CILogon service will use GridShib-CA to provide service to the broader NSF community.

NCSA hosts a GridShib-CA test service on https://shibber.ncsa.uiuc.edu/ if you just want to try GridShib-CA out.