CANARIE manages the Canadian Access Federation (CAF), which provides open-source Shibboleth identity federation infrastructure enabling single sign-on for over 300 Canadian universities, colleges, and research institutions. Their open tools and configuration guides are publicly available.