SAML-based products and services

Short description: List of computer security products using Security Assertion Markup Language

Security Assertion Markup Language (SAML) is a set of specifications that encompasses the XML-format for security tokens containing assertions to pass information about a user and protocols and profiles to implement authentication and authorization scenarios. This article has a focus on software and services in the category of identity management infrastructure, which enable building Web-SSO solutions using the SAML protocol in an interoperable fashion. Software and services that are only SAML-enabled do not go here.

## Contents

* 1 Products that provide SAML actors
* 2 Libraries and toolkits to develop SAML actors and SAML-enabled services
* 3 SAML-related services
* 4 References

## Products that provide SAML actors

SAML actors are Identity Providers (IdP), Service Providers (SP), Discovery Services, ECP Clients, Metadata Services, or Broker/IdP-proxy. This table shows the capability of products according to Kantara Initiative testing.[1][2] Claimed capabilities are in column "other". Each mark denotes that at least one interoperability test was passed. Detailed results with product and test procedure versions are available at the Kantara/Liberty site given below.

NOTE: This table represents a snapshot over time roll up of the most recent product test results (multiple testing rounds). Please note that some products features and abilities may have been updated since they were last tested. Please check the website information of the originating product for the latest features and updates.

Product Name  | Project/Vendor  | License  | Kantara-certified Interoperability  | Other Features

|
|
|
|

IdP  | IdP Light  | SP  | SP Light  | eGov 1.5  | Attr Auth Resp  | POST Bind.  | Roles  | Protocols
Broker  | Discovery  | ECP  | IdP  | IdP Proxy  | Reverse Proxy  | SP
10Duke Identity Provider[3] | 10Duke | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0, OAuth 2, OpenID, LDAP, Federation
adAS SSO[4] | PRiSE  | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, SAML 1.0, Google, Microsoft365, Facebook, Twitter, Kerberos, LDAP, Federation, OAuth2, OpenID Connect, CAS v1, CAS v2, PAPI, OpenID
ADFS 1.x | Microsoft | Commercial |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 1.0
ADFS 2.0 | Microsoft | Commercial |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 1.1/2.0
ADFS 2.1 | Microsoft | Commercial |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 2.0
ADFS 3.0 | Microsoft | Commercial |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 2.0, OAuth2
ADFS 4.0 | Microsoft | Commercial |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect
Aerobase | Aerobase | OSS |  |  |  |  |  |  |  |  |  |  |  |  |  |  | Integrated SSO and IDM for browser apps and RESTful web services. Built on top of the OAuth 2.0, OpenID Connect, JSON Web Token (JWT) and SAML 2.0 specifications[5]
Afrilas[6] | Able - AXS Guard | Commercial |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0 Strong Authentication without usernames
Asimba[7] | Asimba.org  | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | (Fork of OpenASelect)
AssureBridge SAMLConnect[8] | AssureBridge | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0, OpenID, WS-Federation, Kerberos, Radius, X509, LDAP
Auth0[9] | Auth0  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OAuth2, OpenID, SAML 1.1, SAML 2.0, WS-Federation, LDAP
Authentic2[10] | Entrouvert | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OpenID 1&2, CAS 1&2, OAuth2, LDAP 2&3, PAM, RADIUS, OATH, Kerberos, X509
AuthStack[11] | Buckhill  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.0, SAML 1.1, SAML 2.0, LDAP, Kerberos, X509, RADIUS, OAuth2, SOAP/REST API
Azure Active Directory  | Microsoft  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, WS-Federation, Kerberos Constrained Delegation, OAuth 2.0, OpenID Connect
BIG-IP Access Policy Manager | F5 Networks | Commercial |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0
Bitium[12] | Bitium | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML, SAML 2.0
CA Single Sign-On[13] | CA | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.0/1/1/2.0, OAuth2, OpenID, WS-Federation
Central Authentication Server (CAS)[14] | Apereo Foundation | Open source  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, OAuth2, OpenID, WS-Federation
Centrify DirectControl | Centrify | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML, OpenID, OAuth, WS-*, LDAP, Kerberos
Ceptor[15] | Ceptor | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1/2.0, OAuth 2.0, WS-Federation, OpenID Connect, Kerberos
cidaas[16] | cidaas by Widas ID GmbH  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, OAuth2, OpenID Connect
Citrix Open Cloud[17] | Citrix | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SSO Middleware, native service connectors
Cloud Identity Manager | McAfee | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2, OpenID, OAuth, XACML, LDAP v3, JM
Cloud Federation Service[18] | Radiant Logic | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, WS-Federation, OAuth 2.0, OpenID
Cloudseal[19] | Cloudseal | SaaS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
Cognito[20] | Amazon | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0
Comfact IDP[21] | Comfact | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
Connectis[22] | Connectis | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
Corto project home | GÉANT | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
DACS[23] | Safran Identity & Security | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SSO, OpenID Connect, OATH & OCRA, SMS, X509v3 Certificate, eID card, FIDO UAF, LDAP/AD, multi-factor
Dot Net Workflow[24] | The Dot Net Factory | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS*-, WS-Federation, WS-Trust, OpenID, OAuth 2.0, Facebook, LinkedIn, Twitter, Yahoo, Windows Live (MSN)
DirX Access[25] | Atos/Siemens | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
DualShield[26] | Deepnet Security | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0
Elastic SSO Team[27] | 9STAR | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0 SAML 1.1
Elastic SSO Enterprise[28] | 9STAR | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0 SAML 1.1
ESOE | Queensland University of Technology | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
Entrust GetAccess[29] | Entrust | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.0, SAML 1.1, SAML 2.0
Entrust IdentityGuard[30] | Entrust | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, OpenID
EIC[31] | Ericsson | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |
EmpowerID[32] | The Dot Net Factory | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS*-, WS-Federation, WS-Trust, OpenID, OAuth 2.0, Facebook, LinkedIn, Twitter, Yahoo, Windows Live (MSN)
Evidian Web Access Manager | Evidian | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0, OpenID Connect, CAS 1&2, OAuth2, LDAP v3, RADIUS, OATH, Kerberos, X509, Microsoft365, Google, Multi-factor, SSO, extended integration functionalities, Federation
Fluig Identity | TOTVS | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0
Forum Sentry[33] | Forum Systems | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 2.0, SAML 1.1, OAuth 1.0.a. OAuth 2, OpenID Connect
Fugen Cloud ID Broker | Fugen Solutions | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0, WS-Federation, WS-Trust, OpenID, and OAuth
FusionAuth[34] | FusionAuth | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, OIDC, OAuth, LDAP
GlobalSign SSO | GMO GlobalSign | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, ETSI MSS 102 204, TUPAS, WS-Federation, OpenID
Gluu Server[36] | Gluu | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OpenID Connect, UMA, RADIUS, LDAP, FIDO, OAuth
Hitachi ID Identity and Access Management Suite[37] | Hitachi ID Systems, Inc. | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0
Horizon App Manager[38] | VMware | Commercial  |  |  |  |  |  |  |  |  |  |  | ?  |  |  |  |
HP IceWall SSO[39] | HP | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2
ILANTUS Sign On Express[40] | Ilantus | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2
Intel Cloud SSO[41] | Intel | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2, OpenID, OAuth
Ilex Sign&go[42] | ILEX | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 2.0, SAML 1.0, Shibboleth, CAS, Google, Microsoft365, Facebook, Kerberos, LDAP
iSAML[43] | Avoco | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2, WS-Trust, OpenID
iWelcome[44] | iWelcome | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2, SAML 1.0, WS-Trust, Kerberos, OAuth2, Facebook, google, includes provisioning from-to on-Prem, AD, Multi-factor, extended integration functionalities
JOSSO (Community Ed.)[45] | josso.org | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML2, OAuth2, WS-Trust, SPMLV2, Kerberos, JOSSO1
JOSSO (Enterprise Ed.)[46] | Atricore | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML2, WS-Fed, OpenID Connect, OAuth2, WS-Trust, SPMLV2, Kerberos, JOSSO1
Juniper SSL VPN[47] | Juniper Networks | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
Keycloak | JBoss  | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | Integrated SSO and IDM for browser apps and RESTful web services. Built on top of the OAuth 2.0, OpenID Connect, JSON Web Token (JWT) and SAML 2.0 specifications[48]
Layer 7[49] | SecureSpan Gateway | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | PDP/PEP, Auth2, SAML 1.1, SAML2, ABAC, OpenID Connect, XML Firewall
Larpe[50] | Entrouvert | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML, OpenID, CAS, OAuth
LemonLDAP::NG[51] | LemonLDAP::NG | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SSO, WS-Federation, CAS, OpenID-Connect, SAML-2, Twitter, Protocol proxy
LoginRadius  | LoginRadius  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | Web SSO, Federation SSO, SAML, OAuth, OIDC, WS-Federation, JWT
MicroFocus (NetIQ) Access Manager[52] | NetIQ (formerly Novell) | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |
\+ SP Broker  | WS-Security, WS-Federation, WS-Trust, SAML 1.1 / 2.0, Liberty, Single Sign-on, RBAC, CardSpace, OAuth 2.0, OpenID, STS. Includes out of the box integration with cloud and social media providers (Office 365, Windows Live (MSN), Google, Facebook, Salesforce, Amazon web services and 200+ preconfigured connections to SaaS providers etc.) Integration for Advanced Authentication Framework
miniOrange | miniOrange | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |
\+ Identity Broker  | SAML 2.0, OAuth2, OpenID Connect, WS-Fed
NetWeaver Appserver[53] | SAP | Commercial  |  |  |  |  |  |  |  |  |  |  | ?  |  |  |  | CAS, OpenId, Twitter
OneGate[54] | MobilityGuard  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0
OpenAM | Open Identity Community [1], ForgeRock (ex. Sun) until 2016[55] | CDDL  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OpenID Connect, OAuth2, SAML 2.0, SAML 1.1, WS-Federation, WS-Trust, XACML, Liberty, Kerberos, Facebook, Google, Windows Live (MSN)
Okta[56] | Okta | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect
OneLogin[57] | OneLogin | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML, WS-Federation, Kerberos, OAuth, OpenID
OpenAthens LA[58] | eduserv | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
OpenAthens SP[59] | eduserv | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
Open Select[60] | OpenASelect.org | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OAuth (project continues as asimba)
Optimal IdM VIS Federation Services[61] | Optimal IdM | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  \+ Proxy, SSO  | WS-Federation, WS-Trust, SAML 1.x, SAML 2.0, OAuth2, OpenID Connect, SCIM, Facebook, Twitter, LinkedIn, Google, IWA, X509, Kerberos, LDAP, Office 365, RADIUS, MFA (Push, SMS, Email, Voice, TOTP, U2F, Radius)
Oracle Identity Federation 11g[62] | Oracle | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, SAML 1.x, SAML 2.0, OpenID 2.0
Pega 7 Platform[63] | Pegasystems Inc. | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, OAuth, WS-Trust, LDAP
PhoneFactor[64] | PhoneFactor, Inc | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
PicketLink[65] | JBoss Community | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OpenID, A-Select, CAS, XACML
PingFederate[66] | Ping Identity | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0, WS-Federation, WS-Trust, WS-Security, OAuth, OpenID Connect, OpenID, SCIM, Facebook, Twitter, LinkedIn, Google, Windows Live, Kerberos, IWA, X.509, LDAP, RADIUS, 3rd Party MFA
PortalGuard[67] | PistolStar, Inc. | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2, LDAP v3, XML-DSIG, SSO Middleware
RSA Federated Identity[68] | RSA | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | Facebook, OpenID, LinkedIn, Twitter, Windows Live
SAASPASS  | SAASPASS  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect, LDAP
Safewhere*Identify[69] | Safewhere | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, WS-Federation, WS-Trust, OAuth 2.0, multi-factor, OpenID Connect, Facebook, LinkedIn, Twitter, LiveID, Google, LDAP
SailPoint IdentityNow[70] | SailPoint | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0, OAuth2, Kerberos, WS-Federation
Samanage[71] | Samanage | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | Enterprise-to-cloud SSO Middleware
SATOSA[72] | SATOSA | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | Proxy between SAML2, OpenID Connect and OAuth2
SecureAuth[73] | SecureAuth Corp. | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | 2-Factor, IBM LTPA, Facebook, Google, LinkedIn, Microsoft FBA, Microsoft IWA, OAUTH, OpenID, OpenID Connect, SAML 1.1, SAML 2.0, Twitter, WebServices, Windows Live, X.509v3, Yahoo
SecureSSO[74] | SurePassID | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect, O365, SCADA - cloud & on-prem
Shibboleth | Internet2 | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0
SimpleSAMLphp[75] | UNINETT AS | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OpenID, A-Select, CAS, WS-Federation and OAuth,Facebook,LinkedIn,Twitter, Windows Live, SAML 2
Smartsignin[76] | PerfectCloud | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, SAML 1.0, Google, Microsoft365, LDAP, WS-Federation
SMS PASSCODE Multi-factor Authentication[77] | SMS PASSCODE | Commercial |  |  |  |  |  |  |  |  |  |  | ?  |  |  |  |
SSO EasyConnect[78] | SSO Easy | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
SSOgen | SSOGEN Corporation  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0,OAuth2,OpenID Connect,OpenID Provider,RADIUS, LDAP, Multi Factor Authentication.

Cloud SSO Solution for enterprises to protect on-premise applications such as SSOgen for Oracle EBS, SSOgen for PeopleSoft, SSOgen for JDE, and SSOgen for SAP, with a web server plug-in and Cloud SaaS applications with SAML, OpenID Connect integrations.

Symlabs Federated Identity Suite[79] | Symlabs | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OpenID, A-Select, CAS, WS-Federation and OAuth
Symplified[80] | Symplified | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 1.1, SAML 2.0, WS-Federation, OpenID, OAuth, XACML, IBM LTPA, Microsoft IWA, 2-Factor, Facebook, Google, Twitter, ABAC / context-based AC
Tivoli Federated Identity Manager[81] | IBM | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | WS-Federation, OpenID, Liberty, InfoCard, Microsoft CardSpace
TrustBind[82] | NTT Software Corp | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OpenID, ID-WSF
TrustBuilder[83] | SecurIT | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, OAuth 2.0, OpenID Connect, Kerberos
Trustelem[84] | Trustelem  | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, OpenID Connect, WS-Fed, OAuth 2.0, Integrated Windows Authentication, Kerberos, Active Directory, LDAP, FIDO U2F.
USP Secure Entry Server[85] | United Security Providers | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, SAML 1.0, Kerberos, NTLM, LDAP, RADIUS, RSA, SuisseID, RBAC, SSO, Tomcat Authenticator, IIS ISAPI Filter, mTAN, PKI/X.509, Reverse Proxy, Multi-Factor, SOAP/REST Connectors, WebService Security, Office365, GoogleApps
Weblogic | Oracle | Commercial  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |
WSO2[86] | wso2 | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | OAuth2, WS-Trust, OpenID
ZITADEL[87] | ZITADEL  | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | SAML 2.0, OpenID Connect 1.0, OAuth 2.0, FIDO2, OTP, U2F
ZXID[88] | zxid | OSS  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | ID-WSF2, XACML2, WS-Security, XML-DSIG, TAS3

## Libraries and toolkits to develop SAML actors and SAML-enabled services

Libraries and toolkits are used by developers to integrate applications and services into SAML federations or to build their own SAML-actors like IdPs.

Libraries and Toolkits  | Organization  | Licence  | Purpose and Language bindings

|
|
|

Australian Access Federation[89] | Australian Access Federation | OSS | Metadata Registry based on former work by SWITCH
ComponentSpace[90] | ComponentSpace | Commercial | SAML libraries for ASP.NET and ASP.NET Core applications
Corto[91] | WAYF | OSS | SAML2 proxy, virtual IdP, user consent
DjangoSAML2[92] | GitHub  | OSS  | SAML2 application for Django, using PySAML2 underneath
EmpowerID IdP & SP Kit[93] | Dot Net Factory | Commercial | IdP and SP Kit, .NET, REST, and SOAP-based integration kit to SAML-enable applications
FEMMA[94] | SourceForge | OSS | Workaround for the ADFS limitation of a single EntityID per XML infoset
Firefox ECP Plugin[95] | Openliberty | OSS | Firefox extension for compliance with SAML ECP
FLOG F-Ticks Vizualization[96] | SUNET | OSS | Parse and chart F-Ticks for webSSO and Eduroam (sample site: http://flog.sunet.se/)
Jagger[97] | HEAnet | OSS | Metadata and Federation data manager; Shibboleth IDP GUI
JAKOB[98] | WAYF | OSS | Backchannel attribute collector
JANUS[99] | WAYF | OSS | Metadata Registry for hub-and-spoke federations based on SimpleSAMLphp; includes self-service
Jitbit ASP.NET SAML lib[100] | GitHub | OSS | SAML 2.0 "consumer" component for ASP.NET
Lasso[101] | Entrouvert | OSS | SAML-Library: C/C++, Python, Java, Perl, PHP
LightSAML core[102] |  | OSS | SAML-Library: PHP
OIOSAML 2.0 Toolkit[103] | Danish IT and Telekom Agency | OSS | SP Framework: Java, .NET,[104] PHP (Documentation see OIOSAML.java)
OmniAuth-Shibboleth[105] | OneLogin | OSS | SAML-Library: ASP/.NET, Java, PHP, Python, Ruby
OneLogin[106] | OneLogin | OSS | SAML-Library: ASP/.NET, Java, PHP, Python, Ruby
OpenConext[107] | SURFnet | OSS | Service Provider Proxy and Hub-and-Spoke federation middleware, includes SAML proxy and central group management for creating collaboration platforms
OpenSAML[108] | Internet2 | OSS | SAML-Library: C++, Java
MET[109] | TERENA | OSS | gathers and shows information about federations (mostly about SPs and IdPs)
Mujina[110] | SURFnet | OSS | SAML test actors that can be dynamically configured using a REST interface
PAC4J-SAML[111] |  | OSS | SAML Service Provider Library (and other authentication mechanisms)
PEER[112] | GÉANT | OSS | SAML Metadata Registry
PHPH[113] | WAYF.dk | OSS | SAML Metadata Processor
Ping Identity[114] | Ping Identity | Commercial | Java, .NET, PHP and language neutral integration kits to SAML-enable applications
PySAML2[115] | GitHub | OSS | SAML-Library: Python
Python-SAML  | OneLogin | OSS  | SAML-Library: Python
Pysfemma[116] | GitHub | OSS | automate membership configuration of an ADFS STS in a SAML2 based Identity Federation
PyFF[117] | SUNET | OSS | SAML Metadata Processor
Raptor[118] | Jisc | OSS | toolkit to enable Shibboleth IdP statistics analysis
SAML Metadata Aggregator[119] | NORDUnet | OSS | Aggregates single metadata files and provides MDX webservice
SAML Tracer (Firefox addon)[120] | UNINETT AS | OSS | Firefox Plug-In to trace SAML messages
SecureBlackbox[121] | /n software  | Commercial  | The component that implements SAML in client apps, which need to use service providers, or can be used to create your own service and identity providers
SpringSecurity SAML[122] | SpringSource | OSS | SAML-enable applications based on Spring framework
Switch GMT[123] | SWITCH-AAI | OSS | Group Management Tool for Shibboleth
Ultimate SAML[124] | ComponentPro | Commercial | SAML 1.1 and 2.0 Libraries for .NET
Webisoget[125] |  | OSS | Command-line Tool to fetch a SSO-protected page including Shibboleth-Login
ZXID[126] | zxid | OSS | C, other lang using swig.org

## SAML-related services

This section lists public services such as identity and attribute providers, metadata and test services, but *not* SAML-enabled web-applications and cloud services.

Service  | Organization  | Purpose

|
|

9STAR[127] | 9STAR | 9STAR Managed Services for Shibboleth/SAML SSO On-Premises or Cloud
9STAR[128] | 9STAR | 9STAR Shibboleth/SAML SSO Support Services
Acrot A-OK[129] | Arcot | IdP (+ Fraud detection)
eduTEAMs[130] | SURFnet | Federation enabled Group management service which acts as an Attribute Authority for group relations
Federation Lab[131] | GÉANT | Test-SP, metadata registry, test tools
Feide OpenIdP[132] | UNINETT AS | IdP that allows any user to register, and any SP to connect
Gazelle IHE validator[133] | Gazelle | SAML Assertion Validation
Gluu On-Prem Managed Service[134] | Gluu | IdP for SAML and OpenID Connect-enabled cloud services
Identity Hub[135] | Entrouvert | Free IdP; Any user and any SP
OneLogin SSO[136] | OneLogin | IdP for SAML- and OpenID-enabled cloud services
REEP[137] | GÉANT | Public metadata registry
PhoneFactor[138] | PhoneFactor Inc. | IdP/cloud SSO
PingOne[139] | Ping Identity | Cloud Access and Application Provider Services for IdPs and SPs
SAASPASS  | SAASPASS  | IdP, IdM, Multi-Protocol STS (multiple claims based integrations including SAML 1.1, 2.0 SP SSO, 2.0 IdP SSO, OpenID Connect, .NET, CA SiteMinder and others
SamlComponent.net[140] | SamlComponent | SAML Resources for Developers
samlidp.io[141] | Kitek Media Kft.  | SAML Identity Provider as a Service
SecureAuth[142] | SecureAuth Corp. | IdP, IdM, Multi-Protocol STS (multiple claims based integrations including SAML 1.1, 2.0 SP SSO, 2.0 IdP SSO, OpenID, .NET, CA SiteMinder and others
SSOCircle[143] | SSOCircle | Free IdP
Testshib[144] | Internet2 | IdP and SP for testing
UnitedID[145] | United ID Services | Free IDP service
Verizon Web Access Management[146] | Verizon Business | IdP
ZXID[147] | zxid.org | Free IdP

## References

1. ↑ "Kantara Initiative 2011 Q1 SAML 2.0 Full-Matrix Interoperability Testing". http://kantarainitiative.org/confluence/display/certification/2011+Q1+Kantara+Initiative+SAML+2.0+Full-Matrix+Interoperability+Testing.
2. ↑ "Liberty Alliance SAML interoperability tests". 12 November 2021. http://projectliberty.org/liberty/liberty_interoperable/implementations/?f=liberty/liberty_interoperable/implementations.
3. ↑ "10Duke Identity Provider". 11 February 2022. https://www.10duke.com/products/identity-provider/.
4. ↑ "adAS SSO". http://www.adas-sso.com/en.
5. ↑ "Aerobase". Aerobase Org. https://www.aerobase.io.
6. ↑ "Afrilas". http://www.afrilas.com.
7. ↑ "Asimba". http://www.asimba.org.
8. ↑ "AssureBridge". http://www.assurebridge.com/.
9. ↑ "Auth0" (in en). https://auth0.com/.
10. ↑ "Authentic2". https://dev.entrouvert.org/.
11. ↑ "Authstack - Identity Access Management (IAM) and Single Sign-On Software" (in en). https://www.buckhill.co.uk/products/authstack-single-sign-on.
12. ↑ "Bitium Single Sign-on". http://www.bitium.com/site/product/single-sign-on/.
13. ↑ "CA Federation Manager". http://www.ca.com/us/products/detail/CA-Federation-Manager.aspx.
14. ↑ "CAS SAML2 Authentication". https://apereo.github.io/cas/5.1.x/installation/Configuring-SAML2-Authentication.html.
15. ↑ "Secure IT Infrastructure for Online Business Applications | Ceptor" (in en-US). https://ceptor.io.
16. ↑ "cidaas – European Cloud Identity and Access Management" (in en-US). https://www.cidaas.com/.
17. ↑ "Citrix Open Cloud Access". http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300426.
18. ↑ "RadiantOne Cloud Federation Service". http://www.radiantlogic.com/products/radiantone-cfs/.
19. ↑ "Cloudseal SSO for Java". http://www.cloudseal.com/.
20. ↑ "Amazon Cognito: SAML identity providers (identity pools)". https://docs.aws.amazon.com/cognito/latest/developerguide/saml-identity-provider.html.
21. ↑ "Comfact IDP". https://www.comfact.com/Product/IdP.
22. ↑ "Connectis". http://www.connectis.com/.
23. ↑ "Morpho DACS". https://www.morpho.com/sites/morpho/files/strong_authentication_macs_morpho_access_control_server_en.pdf.
24. ↑ "Dot Net Workflow cloud and corporate SSO and Federation". http://www.thedotnetfactory.com/products/federationservices.
25. ↑ "DirX Access". http://atos.net/en-us/solutions/identity-security-and-risk-management/identity-and-access-management-with-dirx/default.htm.
26. ↑ "DualShield unified authentication platform". http://www.deepnetsecurity.com/solutions/cloud/saml/.
27. ↑ "9STAR's Elastic SSO Team". 16 October 2018. http://www.9starinc.com/solutions/elasticsso-team.
28. ↑ "9STAR's Elastic SSO Enterprise". 16 October 2018. http://www.9starinc.com/solutions/elasticsso-enterprise.
29. ↑ "Entrust GetAccess". https://www.entrust.com/products/entrust-getaccess/.
30. ↑ "Entrust IdentityGuard". https://www.entrust.com/products/entrust-identityguard/.
31. ↑ "EIC". http://www.ericsson.com/products/hp/Ericsson_Identity_Management_bs.shtml.
32. ↑ "EmpowerID". http://www.thedotnetfactory.com/.
33. ↑ "API Security Gateway". https://www.forumsys.com/.
34. ↑ "FusionAuth Community Edition". https://fusionauth.io.
35. ↑ "GlobalSign SSO". Globalsign. 30 March 2020. https://globalsign.com/en/products/.
36. ↑ "Open Source Access Management". http://www.gluu.org.
37. ↑ "IAM Solutions". http://www.hitachi-id.com.
38. ↑ "Horizon App Manager". http://www.horizonmanager.com/.
39. ↑ "HP IceWall SSO". http://h50146.www5.hp.com/products/software/security/icewall/eng/sso/.
40. ↑ "ILANTUS Xpress Sign-On". 10 September 2019. http://www.ilantus.com/xpress-sign-on/.
41. ↑ "Intel Cloud SSO". http://www.intelcloudsso.com.
42. ↑ "Ilex". http://www.ilex.fr/.
43. ↑ "Avoco Identity". http://www.avocoidentity.com/avoco-platform/isaml/.
44. ↑ "iWelcome". http://www.iwelcome.com.
45. ↑ "JOSSO (Community Edition)". http://www.josso.org.
46. ↑ "JOSSO (Enterprise Edition)". http://www.atricore.com.
47. ↑ "Juniper SSL VPN". http://www.juniper.net/techpubs/software/ive/releasenotes/j-sa-sslvpn-7.1R1-whatsnew.pdf.
48. ↑ "Keycloak". JBoss Community. http://www.keycloak.org.
49. ↑ "Layer 7". http://www.layer7tech.com//.
50. ↑ "Larpe". http://larpe.labs.libre-entreprise.org/.
51. ↑ "LemonLDAP::NG". http://lemonldap-ng.org.
52. ↑ "NetIQ Access Manager". http://www.netiq.com/products/access-manager/.
53. ↑ "NetWeaver Appserver". http://www.sdn.sap.com/irj/sdn/nw-identitymanagement.
54. ↑ "Mobilityguard OneGate". http://mobilityguard.com/.
55. ↑ "ForgeRock has shuttered the open-source community, and no longer allows new development on their platform under a permissive license". June 1, 2017. http://www.timeforafork.com/. Retrieved June 1, 2017.
56. ↑ "Cloud service platform". http://www.okta.com/.
57. ↑ "OneLogin Single Sign On". http://www.onelogin.com/product/.
58. ↑ "OpenAthens LA". http://www.eduserv.org.uk/identity-access/products/openathens-la.
59. ↑ "OpenAthens SP". http://www.eduserv.org.uk/identity-access/products/openathens-sp.
60. ↑ "OpenASelect". http://www.openaselect.org.
61. ↑ "Optimal IdM VIS Federation Services". http://optimalidm.com/our-products/virtual-identity-server-federation-services/.
62. ↑ "Oracle Identity Federation 11g". http://www.oracle.com/technetwork/middleware/id-mgmt/index-084079.html.
63. ↑ "Pega7". 15 September 2020. http://www.pega.com/products/pega-7.
64. ↑ "PhoneFactor". https://www.phonefactor.com/.
65. ↑ "PicketLink". http://www.jboss.org/picketlink.
66. ↑ "PingFederate". https://www.pingidentity.com/products/pingfederate/.
67. ↑ "PortalGuard". http://www.portalguard.com.
68. ↑ "RSA Federated Identity Manager". http://www.emc.com/security/rsa-identity-and-access-management/rsa-federated-identity-manager.htm.
69. ↑ "Safewhere*Identify". http://safewhere.com/product/safewhere-identify.
70. ↑ "SailPoint IdentityNow". https://www.sailpoint.com/products/identitynow/.
71. ↑ "Samanage". http://www.samanage.com/products/integration.html.
72. ↑ "Github/SATOSA". 25 October 2021. https://github.com/SUNET/SATOSA.
73. ↑ "SecureAuth". https://www.secureauth.com.
74. ↑ "SurePassID". http://www.surepassid.com/.
75. ↑ "SimpleSAMLphp". http://simplesamlphp.org.
76. ↑ "Smartsignin Single Sign-on". https://www.perfectcloud.io/smartsignin.
77. ↑ "SMS PASSCODE". http://www.smspasscode.com/what-we-do/multi-factor-authentication/.
78. ↑ "SSO EasyConnect". http://www.ssoeasy.com/enterprise-sso.
79. ↑ "Symlabs Federated Identity Suite". http://symlabs.com/products/federated-identity-suite.
80. ↑ "Symplified". http://www.symplified.com/features/.
81. ↑ "Tivoli Federated Identity Manager". 9 November 2020. http://www-03.ibm.com/software/products/en/federated-identity-mgr/.
82. ↑ "TrustBind/Federation Manager". http://www.ntts.co.jp/products/trustbind/.
83. ↑ "TrustBuilder". http://www.trustbuilder.be.
84. ↑ "Trustelem Cloud SSO | Active Directory and multi-factor authentication" (in en). https://www.trustelem.com/cloud-sso.
85. ↑ "USP Secure Entry Server". http://www.web-access-management.com/.
86. ↑ "WSO2". http://wso2.com/products/identity-server/.
87. ↑ "ZITADEL". https://zitadel.com/.
88. ↑ "ZXID". http://zxid.org/.
89. ↑ "Federation Registry". http://wiki.aaf.edu.au/federationregistry/.
90. ↑ "ComponentSpace". https://www.componentspace.com/saml/.
91. ↑ "cortoweb". https://sites.google.com/site/cortopages/.
92. ↑ "knaperek/djangosaml2". https://github.com/knaperek/djangosaml2.
93. ↑ "EmpowerID Dot Net Workflow Idp & SP Kit". http://www.thedotnetfactory.com/#.
94. ↑ "Federation Metadata Manager for ADFS". http://sourceforge.net/projects/femma/.
95. ↑ "Firefox ECP Plugin". http://openliberty.org/wiki/index.php/ECP_Plugin_Overview.
96. ↑ "FLOG". 8 May 2020. https://github.com/SUNET/flog.
97. ↑ "JAGGER (ResourceRegistry3". 20 October 2021. https://github.com/Edugate/Jagger.
98. ↑ "JAKOB Attribute Collector". http://code.google.com/p/jakob/.
99. ↑ "JANUS". 21 March 2020. https://github.com/janus-ssp/janus.
100. ↑ "Jitbit SAML toolkil". 13 April 2022. https://github.com/jitbit/AspNetSaml.
101. ↑ "Lasso". http://lasso.entrouvert.org.
102. ↑ "LightSAML core". https://www.lightsaml.com/LightSAML-Core/.
103. ↑ "OIOSAML 2.0 Toolkit". https://svn.softwareborsen.dk/oiosaml.java/sp/trunk/docs/index.html.
104. ↑ "OIOSAM.net Service Provider Framework". http://digitaliser.dk/resource/1413492/artefact/Net+SAML2+Service+Provider+Framework_version_1.7.pdf.
105. ↑ "Shibboleth Binding for OmniAuth 1.x". 16 December 2020. https://github.com/toyokazu/omniauth-shibboleth.
106. ↑ "SAML Toolkits from OneLogin". http://www.onelogin.com/resources/saml-toolkits/.
107. ↑ "OpenConext". https://www.openconext.org.
108. ↑ "OpenSAML". http://opensaml.org.
109. ↑ "Metadata Explorer Tool". 14 January 2021. https://github.com/TERENA/met.
110. ↑ "Mujina Mock IdP and SP". 13 April 2022. https://github.com/OpenConext/Mujina/.
111. ↑ "PAC4J Security Engine". http://www.pac4j.org/docs/clients/saml.html.
112. ↑ "PEER". 26 June 2018. https://github.com/Emergya/peer.
113. ↑ "PHPH". 7 June 2015. https://github.com/wayf-dk/wayf/.
114. ↑ "PingFederate Integration Kits". https://www.pingidentity.com/resource-center/java-dotnet-php-integration.cfm.
115. ↑ "PySAML2". 13 April 2022. https://github.com/rohe/pysaml2.
116. ↑ "Pysfemma". 28 January 2019. https://github.com/rohe/pysfemma.
117. ↑ "PyFF". http://pyff.io/.
118. ↑ "Raptor". http://iam.cf.ac.uk/trac/RAPTOR/.
119. ↑ "SAML Metadata Aggregator". https://portal.nordu.net/display/SAMLMDA/Home.
120. ↑ "SAML Tracer". https://addons.mozilla.org/en-US/firefox/addon/saml-tracer/.
121. ↑ "SAMLBlackbox (SAML component and class library) - SecureBlackbox". https://www.secureblackbox.com/.
122. ↑ "SpringSecurity SAML Site". http://projects.spring.io/spring-security-saml/.
123. ↑ "SWITCH Group Management Tool". http://www.switch.ch/aai/support/tools/gmt.html.
124. ↑ "Ultimate SAML". http://www.componentpro.com/saml.net/.
125. ↑ https://wiki.edugain.org/Webisoget
126. ↑ "ZXID". http://zxid.org/.
127. ↑ "9STAR Shibboleth/SAML SSO Services". 23 October 2018. http://www.9starinc.com/services.
128. ↑ "9STAR Shibboleth/SAML SSO Support". 16 October 2018. http://www.9starinc.com/support.
129. ↑ "Arcot A-OK". http://www.arcot.com/saas/a-ok/enterprise.html.
130. ↑ "eduTEAMs". https://www.eduteams.org/.
131. ↑ "Federation Lab". https://fed-lab.org/.
132. ↑ "Feide OpenIdP". https://openidp.feide.no/.
133. ↑ "Gazelle IHE interop test framework". http://gazelle.ihe.net/content/saml-document-validation.
134. ↑ "Gluu On-Prem Managed Service". http://www.gluu.org/.
135. ↑ "Identity Hub". http://www.identity-hub.com.
136. ↑ "OneLogin SSO". http://www.onelogin.com/product/single-sign-on/.
137. ↑ "RE:EP". https://reep.refeds.org.
138. ↑ "Phonefactor". http://www.phonefactor.com/.
139. ↑ "PingOne". https://www.pingone.com/.
140. ↑ "SAML .NET Dev Zone". http://www.samlcomponent.net.
141. ↑ "samlidp.io - SAML Identity Provider as a Service" (in en). https://samlidp.io.
142. ↑ "SecureAuth Corp.". https://www.secureauth.com/.
143. ↑ "SSO Circle IDP". http://www.ssocircle.com.
144. ↑ "Testshib.org". http://www.testshib.org/testshib-two/index.jsp.
145. ↑ "United ID". http://unitedid.org/.
146. ↑ "Verizon Web Access Management as a Service". http://www.verizonbusiness.com/Products/security/identity/managed/.
147. ↑ "ZXIDP.org". https://zxidp.org/index-idp.html.

{{ | url=https://www.miniorange.com/ | title=Cloud/On-Premise service platform}}

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/SAML-based products and services. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=SAML-based_products_and_services&oldid=3008723"