S2

SimpleSAMLphp 2

Azure Application Infrastructure

SAML 2.0 single sign on, ready to federate on first boot

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

SimpleSAMLphp is a PHP implementation of SAML 2.0 that works as an identity provider, a service provider, or a proxy between the two. It authenticates your users against your own directory and issues signed assertions to the services they sign in to, so one sign in works across every service you federate with. It is the standard choice in education and mid market enterprise, and it ships a built in test bench so a complete round trip can be proven before any real service is connected.

Why the cloudimg image

Every secret is generated on your own instance at first boot, never baked into the image: the secret salt, the administrator password and its hash, and the SAML signing key that your federation partners will trust. The administrator password is stored only as a hash, and the plain text is written once to a root only file. Off instance access is limited to SSH and HTTPS, the admin console and every diagnostic page require authentication, and the image comes with a paired deployment guide and 24/7 support.

Common uses

  • Run single sign on for your own applications and services
  • Federate with an education or research identity federation
  • Put SAML in front of an application that cannot speak it

See it running

Real screenshots taken while testing this image against its deployment guide.

SimpleSAMLphp 2 screenshot 1 SimpleSAMLphp 2 screenshot 2 SimpleSAMLphp 2 screenshot 3 SimpleSAMLphp 2 screenshot 4