The Moonshot client mechanism and ID manager are part of the standard Debian 9 repository. However, if you prefer having the most updated packages, use the following procedure.
Get the Debian 9 packages
Install the Moonshot Client libraries
We’re now ready to install the Moonshot software and its required dependencies. Install the software by running the following commands:
Configure your Moonshot Libraries to connect to an RP Proxy
The Moonshot GSS-EAP mechanism needs to connect to a local Moonshot RP Proxy (RADIUS server) via RADIUS or RadSec in order to create the first hop between the service and the user's home IdP to allow authentication to happen. See the Configure a Linux Server to Connect to an RP Proxy page for instructions on how to do this.
Configure your Application/Service to use Moonshot
Finally, you may have to install/configure that application/service as necessary.