SAML 2.0 single sign on, ready to federate on first boot
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| SimpleSAMLphp 2 | Azure | — | 2 | View · Guide |
SimpleSAMLphp is a PHP implementation of SAML 2.0 that works as an identity provider, a service provider, or a proxy between the two. It authenticates your users against your own directory and issues signed assertions to the services they sign in to, so one sign in works across every service you federate with. It is the standard choice in education and mid market enterprise, and it ships a built in test bench so a complete round trip can be proven before any real service is connected.
Every secret is generated on your own instance at first boot, never baked into the image: the secret salt, the administrator password and its hash, and the SAML signing key that your federation partners will trust. The administrator password is stored only as a hash, and the plain text is written once to a root only file. Off instance access is limited to SSH and HTTPS, the admin console and every diagnostic page require authentication, and the image comes with a paired deployment guide and 24/7 support.