Security Assertion Markup Language (SAML) is a set of specifications that encompasses the XML-format for security tokens containing assertions to pass information about a user and protocols and profiles to implement authentication and authorization scenarios. This article has a focus on software and services in the category of identity management infrastructure, which enable building Web-SSO solutions using the SAML protocol in an interoperable fashion. Software and services that are only SAML-enabled do not go here.
Products that provide SAML actors SAML actors are Identity Providers (IdP), Service Providers (SP), Discovery Services, ECP Clients, Metadata Services, or Broker/IdP-proxy. This table shows the capability of products according to Kantara Initiative testing. Claimed capabilities are in column "other". Each mark denotes that at least one interoperability test was passed. Detailed results with product and test procedure versions are available at the Kantara/Liberty site given below.
NOTE: This table represents a snapshot over time roll up of the most recent product test results (multiple testing rounds). Please note that some products features and abilities may have been updated since they were last tested. Please check the website information of the originating product for the latest features and updates.
Product Name Project/Vendor License Kantara-certified Interoperability Other Features rowspan="2" rowspan="2" rowspan="2" rowspan="2" rowspan="2" rowspan="2" rowspan="2" Roles Protocols 10Duke Identity Provider 10Duke SAML 1.1, SAML 2.0, OAuth 2, OpenID, LDAP, Federation adAS SSO PRiSE SAML 2.0, SAML 1.0, Google, Microsoft365, Facebook, Twitter, Kerberos, LDAP, Federation, OAuth2, OpenID Connect, CAS v1, CAS v2, PAPI, OpenID ADFS 1.xMicrosoft WS-Federation, WS-Trust, SAML 1.0 ADFS 2.0Microsoft WS-Federation, WS-Trust, SAML 1.1/2.0 ADFS 2.1Microsoft WS-Federation, WS-Trust, SAML 2.0 ADFS 3.0Microsoft WS-Federation, WS-Trust, SAML 2.0, OAuth2 ADFS 4.0Microsoft WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect AerobaseAerobase Integrated SSO and IDM for browser apps and RESTful web services. Built on top of the OAuth 2.0, OpenID Connect, JSON Web Token (JWT) and SAML 2.0 specifications AfrilasAble - AXS Guard SAML 2.0 Strong Authentication without usernamesAsimbaAsimba.org (Fork of OpenASelect) AssureBridge SAMLConnectAssureBridge SAML 1.1, SAML 2.0, OpenID, WS-Federation, Kerberos, Radius, X509, LDAPAuth0Auth0 OAuth2, OpenID, SAML 1.1, SAML 2.0, WS-Federation, LDAP Authentic2Entrouvert OpenID 1&2, CAS 1&2, OAuth2, LDAP 2&3, PAM, RADIUS, OATH, Kerberos, X509AuthStackBuckhill SAML 1.0, SAML 1.1, SAML 2.0, LDAP, Kerberos, X509, RADIUS, OAuth2, SOAP/REST API BIG-IP Access Policy ManagerF5 Networks SAML 2.0 BitiumBitium SAML, SAML 2.0 CA Single Sign-OnCA SAML 1.0/1/1/2.0, OAuth2, OpenID, WS-Federation Central Authentication Server (CAS)Apereo Foundation SAML 2.0, OAuth2, OpenID, WS-Federation Centrify DirectControlCentrify SAML, OpenID, OAuth, WS-*, LDAP, Kerberos CeptorCeptor SAML 1.1/2.0, OAuth 2.0, WS-Federation, OpenID Connect, Kerberos cidaascidaas by Widas ID GmbH SAML 2.0, OAuth2, OpenID Connect Citrix Open CloudCitrix SSO Middleware, native service connectors Cloud Identity ManagerMcAfee SAML 2, OpenID, OAuth, XACML, LDAP v3, JM Cloud Federation ServiceRadiant Logic SAML 2.0, WS-Federation, OAuth 2.0, OpenID CloudsealCloudsealSaaS CognitoAmazon SAML 2.0 Comfact IDPComfact SignicatSignicat Corto project homeGÉANT DACS Safran Identity & Security SSO, OpenID Connect, OATH & OCRA, SMS, X509v3 Certificate, eID card, FIDO UAF, LDAP/AD, multi-factor Dot Net WorkflowThe Dot Net Factory WS*-, WS-Federation, WS-Trust, OpenID, OAuth 2.0, Facebook, LinkedIn, Twitter, Yahoo, Windows Live (MSN) DirX AccessAtos/Siemens DualShieldDeepnet Security SAML 2.0 Elastic SSO Team9STAR SAML 2.0 SAML 1.1 Elastic SSO Enterprise9STAR SAML 2.0 SAML 1.1 ESOEQueensland University of Technology Entra ID (formerly known as Azure Active Directory)Microsoft SAML 2.0, WS-Federation, Kerberos Constrained Delegation, OAuth 2.0, OpenID Connect Entrust GetAccessEntrust SAML 1.0, SAML 1.1, SAML 2.0 Entrust IdentityGuardEntrust SAML 2.0, OpenID EICEricsson EmpowerIDThe Dot Net Factory WS*-, WS-Federation, WS-Trust, OpenID, OAuth 2.0, Facebook, LinkedIn, Twitter, Yahoo, Windows Live (MSN) Evidian Web Access ManagerEvidian SAML 1.1, SAML 2.0, OpenID Connect, CAS 1&2, OAuth2, LDAP v3, RADIUS, OATH, Kerberos, X509, Microsoft365, Google, Multi-factor, SSO, extended integration functionalities, Federation Fluig IdentityTOTVS SAML 2.0 Forum SentryForum Systems WS-Federation, WS-Trust, SAML 2.0, SAML 1.1, OAuth 1.0.a. OAuth 2, OpenID Connect Fugen Cloud ID BrokerFugen Solutions SAML 1.1, SAML 2.0, WS-Federation, WS-Trust, OpenID, and OAuth FusionAuthFusionAuth SAML 2.0, OIDC, OAuth, LDAP GlobalSign SSO GMO GlobalSign SAML 2.0, ETSI MSS 102 204, TUPAS, WS-Federation, OpenID Gluu ServerGluu OpenID Connect, UMA, RADIUS, LDAP, FIDO, OAuth Hitachi ID Identity and Access Management SuiteHitachi ID Systems, Inc. SAML 2.0 Horizon App ManagerVMware HP IceWall SSOHP SAML 2 ILANTUS Sign On ExpressIlantus SAML 2 Intel Cloud SSOIntel SAML 2, OpenID, OAuth Ilex Sign&go ILEX WS-Federation, WS-Trust, SAML 2.0, SAML 1.0, Shibboleth, CAS, Google, Microsoft365, Facebook, Kerberos, LDAP iSAMLAvoco SAML 2, WS-Trust, OpenID iWelcomeiWelcome SAML 2, SAML 1.0, WS-Trust, Kerberos, OAuth2, Facebook, google, includes provisioning from-to on-Prem, AD, Multi-factor, extended integration functionalities JOSSO (Community Ed.)josso.org SAML2, OAuth2, WS-Trust, SPMLV2, Kerberos, JOSSO1 JOSSO (Enterprise Ed.)Atricore SAML2, WS-Fed, OpenID Connect, OAuth2, WS-Trust, SPMLV2, Kerberos, JOSSO1 Juniper SSL VPNJuniper Networks KeycloakJBoss Integrated SSO and IDM for browser apps and RESTful web services. Built on top of the OAuth 2.0, OpenID Connect, JSON Web Token (JWT) and SAML 2.0 specifications Layer 7SecureSpan GatewayPDP/PEP, Auth2, SAML 1.1, SAML2, ABAC, OpenID Connect, XML Firewall LarpeEntrouvert SAML, OpenID, CAS, OAuth LemonLDAP::NGLemonLDAP::NG SSO, WS-Federation, CAS, OpenID-Connect, SAML-2, Twitter, Protocol proxyLoginRadiusLoginRadius Web SSO, Federation SSO, SAML, OAuth, OIDC, WS-Federation, JWTMicroFocus (NetIQ) Access ManagerNetIQ (formerly Novell) + SP BrokerWS-Security, WS-Federation, WS-Trust, SAML 1.1 / 2.0, Liberty, Single Sign-on, RBAC, CardSpace, OAuth 2.0, OpenID, STS. Includes out of the box integration with cloud and social media providers (Office 365, Windows Live (MSN), Google, Facebook, Salesforce, Amazon web services and 200+ preconfigured connections to SaaS providers etc.) Integration for Advanced Authentication Framework NetWeaver AppserverSAPCAS, OpenId, Twitter OneGateMobilityGuard SAML 1.1, SAML 2.0 OpenAMOpen Identity Community , ForgeRock (ex. Sun) until 2016 OpenID Connect, OAuth2, SAML 2.0, SAML 1.1, WS-Federation, WS-Trust, XACML, Liberty, Kerberos, Facebook, Google, Windows Live (MSN) OktaOkta WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect OneLoginOneLogin SAML, WS-Federation, Kerberos, OAuth, OpenID OpenAthens LAeduserv OpenAthens SPeduserv Open SelectOpenASelect.org OAuth (project continues as asimba) Optimal IdM VIS Federation ServicesOptimal IdM + Proxy, SSOWS-Federation, WS-Trust, SAML 1.x, SAML 2.0, OAuth2, OpenID Connect, SCIM, Facebook, Twitter, LinkedIn, Google, IWA, X509, Kerberos, LDAP, Office 365, RADIUS, MFA (Push, SMS, Email, Voice, TOTP, U2F, Radius) Oracle Identity Federation 11gOracle WS-Federation, SAML 1.x, SAML 2.0, OpenID 2.0 Pega 7 PlatformPegasystems Inc. SAML 2.0, OAuth, WS-Trust, LDAP PhoneFactor PhoneFactor, Inc PicketLinkJBoss CommunityOpenID, A-Select, CAS, XACML PingFederatePing Identity SAML 1.1, SAML 2.0, WS-Federation, WS-Trust, WS-Security, OAuth, OpenID Connect, OpenID, SCIM, Facebook, Twitter, LinkedIn, Google, Windows Live, Kerberos, IWA, X.509, LDAP, RADIUS, 3rd Party MFA Plurilock AIPlurilock SAML 1.1, SAML 2.0, FIDO2, OTP, DEFEND PortalGuardPistolStar, Inc. SAML 2, LDAP v3, XML-DSIG, SSO Middleware RSA Federated IdentityRSA Facebook, OpenID, LinkedIn, Twitter, Windows LiveSAASPASSSAASPASS WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect, LDAP Safewhere*IdentifySafewhere SAML 2.0, WS-Federation, WS-Trust, OAuth 2.0, multi-factor, OpenID Connect, Facebook, LinkedIn, Twitter, LiveID, Google, LDAP SailPoint IdentityNowSailPoint SAML 1.1, SAML 2.0, OAuth2, Kerberos, WS-Federation SamanageSamanage Enterprise-to-cloud SSO Middleware SATOSASATOSA Proxy between SAML2, OpenID Connect and OAuth2 SecureAuthSecureAuth Corp. 2-Factor, IBM LTPA, Facebook, Google, LinkedIn, Microsoft FBA, Microsoft IWA, OAUTH, OpenID, OpenID Connect, SAML 1.1, SAML 2.0, Twitter, WebServices, Windows Live, X.509v3, Yahoo SecureSSOSurePassID WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect, O365, SCADA - cloud & on-prem ShibbolethInternet2 SAML 1.1, SAML 2.0 SimpleSAMLphpUNINETT AS OpenID, A-Select, CAS, WS-Federation and OAuth, Facebook, LinkedIn, Twitter, Windows Live, SAML 2 SmartsigninPerfectCloud SAML 2.0, SAML 1.0, Google, Microsoft365, LDAP, WS-Federation SMS PASSCODE Multi-factor AuthenticationSMS PASSCODE SSO EasyConnectSSO Easy SSOgenSSOGEN Corporation SAML 1.1, SAML 2.0, OAuth2, OpenID Connect, OpenID Provider, RADIUS, LDAP, Multi Factor Authentication. Cloud SSO Solution for enterprises to protect on-premise applications such as SSOgen for Oracle EBS, SSOgen for PeopleSoft, SSOgen for JDE, and SSOgen for SAP, with a web server plug-in and Cloud SaaS applications with SAML, OpenID Connect integrations. Symlabs Federated Identity SuiteSymlabs OpenID, A-Select, CAS, WS-Federation and OAuth SymplifiedSymplified SAML 1.1, SAML 2.0, WS-Federation, OpenID, OAuth, XACML, IBM LTPA, Microsoft IWA, 2-Factor, Facebook, Google, Twitter, ABAC / context-based AC Tivoli Federated Identity ManagerIBM WS-Federation, OpenID, Liberty, InfoCard, Microsoft CardSpace TrustBindNTT Software Corp OpenID, ID-WSF TrustBuilderSecurIT SAML 2.0, OAuth 2.0, OpenID Connect, KerberosTrustelemTrustelem SAML 2.0, OpenID Connect, WS-Fed, OAuth 2.0, Integrated Windows Authentication, Kerberos, Active Directory, LDAP, FIDO U2F. USP Secure Entry ServerUnited Security Providers SAML 2.0, SAML 1.0, Kerberos, NTLM, LDAP, RADIUS, RSA, SuisseID, RBAC, SSO, Tomcat Authenticator, IIS ISAPI Filter, mTAN, PKI/X.509, Reverse Proxy, Multi-Factor, SOAP/REST Connectors, WebService Security, Office365, GoogleApps WeblogicOracle WSO2wso2 OAuth2, WS-Trust, OpenIDZITADELZITADELSAML 2.0, OpenID Connect 1.0, OAuth 2.0, FIDO2, OTP, U2F ZXIDzxid ID-WSF2, XACML2, WS-Security, XML-DSIG, TAS3
Libraries and toolkits to develop SAML actors and SAML-enabled services Libraries and toolkits are used by developers to integrate applications and services into SAML federations or to build their own SAML-actors like IdPs.