S2

SimpleSAMLphp

Azure Application Infrastructure 1 variation

SAML 2.0 single sign on, ready to federate on first boot

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Variations

This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.

ProductCloudOperating systemVersion
SimpleSAMLphp 2 Azure 2 View · Guide

Overview

SimpleSAMLphp is a PHP implementation of SAML 2.0 that works as an identity provider, a service provider, or a proxy between the two. It authenticates your users against your own directory and issues signed assertions to the services they sign in to, so one sign in works across every service you federate with. It is the standard choice in education and mid market enterprise, and it ships a built in test bench so a complete round trip can be proven before any real service is connected.

Why the cloudimg image

Every secret is generated on your own instance at first boot, never baked into the image: the secret salt, the administrator password and its hash, and the SAML signing key that your federation partners will trust. The administrator password is stored only as a hash, and the plain text is written once to a root only file. Off instance access is limited to SSH and HTTPS, the admin console and every diagnostic page require authentication, and the image comes with a paired deployment guide and 24/7 support.

Common uses

  • Run single sign on for your own applications and services
  • Federate with an education or research identity federation
  • Put SAML in front of an application that cannot speak it