SAML-based products and services

Security Assertion Markup Language (SAML) is a set of specifications that encompasses the XML-format for security tokens containing assertions to pass information about a user and protocols and profiles to implement authentication and authorization scenarios. This article has a focus on software and services in the category of identity management infrastructure, which enable building Web-SSO solutions using the SAML protocol in an interoperable fashion. Software and services that are only SAML-enabled do not go here.

SAML actors are Identity Providers (IdP), Service Providers (SP), Discovery Services, ECP Clients, Metadata Services, or Broker/IdP-proxy. This table shows the capability of products according to Kantara Initiative testing.¹² Claimed capabilities are in column "other". Each mark denotes that at least one interoperability test was passed. Detailed results with product and test procedure versions are available at the Kantara/Liberty site given below.

NOTE: This table represents a snapshot over time roll up of the most recent product test results (multiple testing rounds). Please note that some products features and abilities may have been updated since they were last tested. Please check the website information of the originating product for the latest features and updates.

Product Name	Project/Vendor	License	Kantara-certified Interoperability							Other Features
			IdP	IdP Light	SP	SP Light	eGov 1.5	Attr Auth Resp	POST Bind.	Roles							Protocols
										Broker	Discovery	ECP	IdP	IdP Proxy	Reverse Proxy	SP
10Duke Identity Provider3	10Duke	Commercial															SAML 1.1, SAML 2.0, OAuth 2, OpenID, LDAP, Federation
adAS SSO4	PRiSE	OSS															SAML 2.0, SAML 1.0, Google, Microsoft365, Facebook, Twitter, Kerberos, LDAP, Federation, OAuth2, OpenID Connect, CAS v1, CAS v2, PAPI, OpenID
ADFS 1.x	Microsoft	Commercial															WS-Federation, WS-Trust, SAML 1.0
ADFS 2.0	Microsoft	Commercial															WS-Federation, WS-Trust, SAML 1.1/2.0
ADFS 2.1	Microsoft	Commercial															WS-Federation, WS-Trust, SAML 2.0
ADFS 3.0	Microsoft	Commercial															WS-Federation, WS-Trust, SAML 2.0, OAuth2
ADFS 4.0	Microsoft	Commercial															WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect
Aerobase5	Aerobase	OSS															Integrated SSO and IDM for browser apps and RESTful web services. Built on top of the OAuth 2.0, OpenID Connect, JSON Web Token (JWT) and SAML 2.0 specifications6
Afrilas7	Able - AXS Guard	Commercial															SAML 2.0 Strong Authentication without usernames
Asimba8	Asimba.org	OSS															(Fork of OpenASelect)
AssureBridge SAMLConnect9	AssureBridge	Commercial															SAML 1.1, SAML 2.0, OpenID, WS-Federation, Kerberos, Radius, X509, LDAP
Auth010	Auth0	Commercial															OAuth2, OpenID, SAML 1.1, SAML 2.0, WS-Federation, LDAP
Authentic211	Entrouvert	OSS															OpenID 1&2, CAS 1&2, OAuth2, LDAP 2&3, PAM, RADIUS, OATH, Kerberos, X509
AuthStack12	Buckhill	Commercial															SAML 1.0, SAML 1.1, SAML 2.0, LDAP, Kerberos, X509, RADIUS, OAuth2, SOAP/REST API
BIG-IP Access Policy Manager	F5 Networks	Commercial															SAML 2.0
Bitium13	Bitium	Commercial															SAML, SAML 2.0
CA Single Sign-On14	CA	Commercial															SAML 1.0/1/1/2.0, OAuth2, OpenID, WS-Federation
Central Authentication Server (CAS)15	Apereo Foundation	Open source															SAML 2.0, OAuth2, OpenID, WS-Federation
Centrify DirectControl	Centrify	Commercial															SAML, OpenID, OAuth, WS-*, LDAP, Kerberos
Ceptor16	Ceptor	Commercial															SAML 1.1/2.0, OAuth 2.0, WS-Federation, OpenID Connect, Kerberos
cidaas17	cidaas by Widas ID GmbH	Commercial															SAML 2.0, OAuth2, OpenID Connect
Citrix Open Cloud18	Citrix	Commercial															SSO Middleware, native service connectors
Cloud Identity Manager	McAfee	Commercial															SAML 2, OpenID, OAuth, XACML, LDAP v3, JM
Cloud Federation Service19	Radiant Logic	Commercial															SAML 2.0, WS-Federation, OAuth 2.0, OpenID
Cloudseal20	Cloudseal	SaaS
Cognito21	Amazon	Commercial															SAML 2.0
Comfact IDP22	Comfact	Commercial
Signicat23	Signicat	Commercial
Corto project home	GÉANT	OSS
DACS24	Safran Identity & Security	Commercial															SSO, OpenID Connect, OATH & OCRA, SMS, X509v3 Certificate, eID card, FIDO UAF, LDAP/AD, multi-factor
Dot Net Workflow25	The Dot Net Factory	Commercial															WS*-, WS-Federation, WS-Trust, OpenID, OAuth 2.0, Facebook, LinkedIn, Twitter, Yahoo, Windows Live (MSN)
DirX Access26	Atos/Siemens	Commercial
DualShield27	Deepnet Security	Commercial															SAML 2.0
Elastic SSO Team28	9STAR	Commercial															SAML 2.0 SAML 1.1
Elastic SSO Enterprise29	9STAR	Commercial															SAML 2.0 SAML 1.1
ESOE	Queensland University of Technology	OSS
Entra ID (formerly known as Azure Active Directory)	Microsoft	Commercial															SAML 2.0, WS-Federation, Kerberos Constrained Delegation, OAuth 2.0, OpenID Connect
Entrust GetAccess30	Entrust	Commercial															SAML 1.0, SAML 1.1, SAML 2.0
Entrust IdentityGuard31	Entrust	Commercial															SAML 2.0, OpenID
EIC32	Ericsson	Commercial
EmpowerID33	The Dot Net Factory	Commercial															WS*-, WS-Federation, WS-Trust, OpenID, OAuth 2.0, Facebook, LinkedIn, Twitter, Yahoo, Windows Live (MSN)
Evidian Web Access Manager	Evidian	Commercial															SAML 1.1, SAML 2.0, OpenID Connect, CAS 1&2, OAuth2, LDAP v3, RADIUS, OATH, Kerberos, X509, Microsoft365, Google, Multi-factor, SSO, extended integration functionalities, Federation
Fluig Identity	TOTVS	Commercial															SAML 2.0
Forum Sentry34	Forum Systems	Commercial															WS-Federation, WS-Trust, SAML 2.0, SAML 1.1, OAuth 1.0.a. OAuth 2, OpenID Connect
Fugen Cloud ID Broker	Fugen Solutions	Commercial															SAML 1.1, SAML 2.0, WS-Federation, WS-Trust, OpenID, and OAuth
FusionAuth35	FusionAuth	Commercial															SAML 2.0, OIDC, OAuth, LDAP
GMO GlobalSign	Commercial															SAML 2.0, ETSI MSS 102 204, TUPAS, WS-Federation, OpenID
Gluu Server37	Gluu	OSS															OpenID Connect, UMA, RADIUS, LDAP, FIDO, OAuth
Hitachi ID Identity and Access Management Suite38	Hitachi ID Systems, Inc.	Commercial															SAML 2.0
Horizon App Manager39	VMware	Commercial											?
HP IceWall SSO40	HP	Commercial															SAML 2
ILANTUS Sign On Express41	Ilantus	Commercial															SAML 2
Intel Cloud SSO42	Intel	Commercial															SAML 2, OpenID, OAuth
Ilex Sign&go43	ILEX	Commercial															WS-Federation, WS-Trust, SAML 2.0, SAML 1.0, Shibboleth, CAS, Google, Microsoft365, Facebook, Kerberos, LDAP
iSAML44	Avoco	Commercial															SAML 2, WS-Trust, OpenID
iWelcome45	iWelcome	Commercial															SAML 2, SAML 1.0, WS-Trust, Kerberos, OAuth2, Facebook, google, includes provisioning from-to on-Prem, AD, Multi-factor, extended integration functionalities
JOSSO (Community Ed.)46	josso.org	OSS															SAML2, OAuth2, WS-Trust, SPMLV2, Kerberos, JOSSO1
JOSSO (Enterprise Ed.)47	Atricore	Commercial															SAML2, WS-Fed, OpenID Connect, OAuth2, WS-Trust, SPMLV2, Kerberos, JOSSO1
Juniper SSL VPN48	Juniper Networks	Commercial
Keycloak	JBoss	OSS															Integrated SSO and IDM for browser apps and RESTful web services. Built on top of the OAuth 2.0, OpenID Connect, JSON Web Token (JWT) and SAML 2.0 specifications49
Layer 750	SecureSpan Gateway	Commercial															PDP/PEP, Auth2, SAML 1.1, SAML2, ABAC, OpenID Connect, XML Firewall
Larpe51	Entrouvert	OSS															SAML, OpenID, CAS, OAuth
LemonLDAP::NG52	LemonLDAP::NG	OSS															SSO, WS-Federation, CAS, OpenID-Connect, SAML-2, Twitter, Protocol proxy
LoginRadius	LoginRadius	Commercial															Web SSO, Federation SSO, SAML, OAuth, OIDC, WS-Federation, JWT
MicroFocus (NetIQ) Access Manager53	NetIQ (formerly Novell)	Commercial														+ SP Broker	WS-Security, WS-Federation, WS-Trust, SAML 1.1 / 2.0, Liberty, Single Sign-on, RBAC, CardSpace, OAuth 2.0, OpenID, STS. Includes out of the box integration with cloud and social media providers (Office 365, Windows Live (MSN), Google, Facebook, Salesforce, Amazon web services and 200+ preconfigured connections to SaaS providers etc.) Integration for Advanced Authentication Framework
NetWeaver Appserver54	SAP	Commercial											?				CAS, OpenId, Twitter
OneGate55	MobilityGuard	Commercial															SAML 1.1, SAML 2.0
OpenAM	Open Identity Community [1], ForgeRock (ex. Sun) until 201656	CDDL															OpenID Connect, OAuth2, SAML 2.0, SAML 1.1, WS-Federation, WS-Trust, XACML, Liberty, Kerberos, Facebook, Google, Windows Live (MSN)
Okta57	Okta	Commercial															WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect
OneLogin58	OneLogin	Commercial															SAML, WS-Federation, Kerberos, OAuth, OpenID
OpenAthens LA59	eduserv	Commercial
OpenAthens SP60	eduserv	Commercial
Open Select61	OpenASelect.org	OSS															OAuth (project continues as asimba)
Optimal IdM VIS Federation Services62	Optimal IdM	Commercial														+ Proxy, SSO	WS-Federation, WS-Trust, SAML 1.x, SAML 2.0, OAuth2, OpenID Connect, SCIM, Facebook, Twitter, LinkedIn, Google, IWA, X509, Kerberos, LDAP, Office 365, RADIUS, MFA (Push, SMS, Email, Voice, TOTP, U2F, Radius)
Oracle Identity Federation 11g63	Oracle	Commercial															WS-Federation, SAML 1.x, SAML 2.0, OpenID 2.0
Pega 7 Platform64	Pegasystems Inc.	Commercial															SAML 2.0, OAuth, WS-Trust, LDAP
PhoneFactor65	PhoneFactor, Inc	Commercial
PicketLink66	JBoss Community	OSS															OpenID, A-Select, CAS, XACML
PingFederate67	Ping Identity	Commercial															SAML 1.1, SAML 2.0, WS-Federation, WS-Trust, WS-Security, OAuth, OpenID Connect, OpenID, SCIM, Facebook, Twitter, LinkedIn, Google, Windows Live, Kerberos, IWA, X.509, LDAP, RADIUS, 3rd Party MFA
Plurilock AI68	Plurilock	Commercial															SAML 1.1, SAML 2.0, FIDO2, OTP, DEFEND69
PortalGuard70	PistolStar, Inc.	Commercial															SAML 2, LDAP v3, XML-DSIG, SSO Middleware
RSA Federated Identity71	RSA	Commercial															Facebook, OpenID, LinkedIn, Twitter, Windows Live
SAASPASS	SAASPASS	Commercial															WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect, LDAP
Safewhere*Identify72	Safewhere	Commercial															SAML 2.0, WS-Federation, WS-Trust, OAuth 2.0, multi-factor, OpenID Connect, Facebook, LinkedIn, Twitter, LiveID, Google, LDAP
SailPoint IdentityNow73	SailPoint	Commercial															SAML 1.1, SAML 2.0, OAuth2, Kerberos, WS-Federation
Samanage74	Samanage	Commercial															Enterprise-to-cloud SSO Middleware
SATOSA75	SATOSA	OSS															Proxy between SAML2, OpenID Connect and OAuth2
SecureAuth76	SecureAuth Corp.	Commercial															2-Factor, IBM LTPA, Facebook, Google, LinkedIn, Microsoft FBA, Microsoft IWA, OAUTH, OpenID, OpenID Connect, SAML 1.1, SAML 2.0, Twitter, WebServices, Windows Live, X.509v3, Yahoo
SecureSSO77	SurePassID	Commercial															WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect, O365, SCADA - cloud & on-prem
Shibboleth	Internet2	OSS															SAML 1.1, SAML 2.0
SimpleSAMLphp78	UNINETT AS	OSS															OpenID, A-Select, CAS, WS-Federation and OAuth, Facebook, LinkedIn, Twitter, Windows Live, SAML 2
Smartsignin79	PerfectCloud	Commercial															SAML 2.0, SAML 1.0, Google, Microsoft365, LDAP, WS-Federation
SMS PASSCODE Multi-factor Authentication80	SMS PASSCODE	Commercial											?
SSO EasyConnect81	SSO Easy	Commercial
SSOgen	SSOGEN Corporation	Commercial															SAML 1.1, SAML 2.0, OAuth2, OpenID Connect, OpenID Provider, RADIUS, LDAP, Multi Factor Authentication. Cloud SSO Solution for enterprises to protect on-premise applications such as SSOgen for Oracle EBS, SSOgen for PeopleSoft, SSOgen for JDE, and SSOgen for SAP, with a web server plug-in and Cloud SaaS applications with SAML, OpenID Connect integrations.
Symlabs Federated Identity Suite82	Symlabs	Commercial															OpenID, A-Select, CAS, WS-Federation and OAuth
Symplified83	Symplified	Commercial															SAML 1.1, SAML 2.0, WS-Federation, OpenID, OAuth, XACML, IBM LTPA, Microsoft IWA, 2-Factor, Facebook, Google, Twitter, ABAC / context-based AC
Tivoli Federated Identity Manager84	IBM	Commercial															WS-Federation, OpenID, Liberty, InfoCard, Microsoft CardSpace
TrustBind85	NTT Software Corp	Commercial															OpenID, ID-WSF
TrustBuilder86	SecurIT	Commercial															SAML 2.0, OAuth 2.0, OpenID Connect, Kerberos
Trustelem87	Trustelem	Commercial															SAML 2.0, OpenID Connect, WS-Fed, OAuth 2.0, Integrated Windows Authentication, Kerberos, Active Directory, LDAP, FIDO U2F.
USP Secure Entry Server88	United Security Providers	Commercial															SAML 2.0, SAML 1.0, Kerberos, NTLM, LDAP, RADIUS, RSA, SuisseID, RBAC, SSO, Tomcat Authenticator, IIS ISAPI Filter, mTAN, PKI/X.509, Reverse Proxy, Multi-Factor, SOAP/REST Connectors, WebService Security, Office365, GoogleApps
Weblogic	Oracle	Commercial
WSO289	wso2	OSS															OAuth2, WS-Trust, OpenID
ZITADEL90	ZITADEL	OSS															SAML 2.0, OpenID Connect 1.0, OAuth 2.0, FIDO2, OTP, U2F
ZXID91	zxid	OSS															ID-WSF2, XACML2, WS-Security, XML-DSIG, TAS3

Libraries and toolkits are used by developers to integrate applications and services into SAML federations or to build their own SAML-actors like IdPs.

This section lists public services such as identity and attribute providers, metadata and test services, but *not* SAML-enabled web-applications and cloud services.