Security Assertion Markup Language (SAML) is a set of specifications that encompasses the XML-format for security tokens containing assertions to pass information about a user and protocols and profiles to implement authentication and authorization scenarios. This article has a focus on software and services in the category of identity management infrastructure, which enable building Web-SSO solutions using the SAML protocol in an interoperable fashion. Software and services that are only SAML-enabled do not go here.
SAML actors are Identity Providers (IdP), Service Providers (SP), Discovery Services, ECP Clients, Metadata Services, or Broker/IdP-proxy. This table shows the capability of products according to Kantara Initiative testing.[1] [2] Claimed capabilities are in column "other". Each mark denotes that at least one interoperability test was passed. Detailed results with product and test procedure versions are available at the Kantara/Liberty site given below.
NOTE: This table represents a snapshot over time roll up of the most recent product test results (multiple testing rounds). Please note that some products features and abilities may have been updated since they were last tested. Please check the website information of the originating product for the latest features and updates.
| Product Name | Project/Vendor | License | Kantara-certified Interoperability | Other Features | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Roles | Protocols | |||||||||||||||||
| 10Duke Identity Provider[3] | 10Duke | SAML 1.1, SAML 2.0, OAuth 2, OpenID, LDAP, Federation | ||||||||||||||||
| adAS SSO[4] | PRiSE | SAML 2.0, SAML 1.0, Google, Microsoft365, Facebook, Twitter, Kerberos, LDAP, Federation, OAuth2, OpenID Connect, CAS v1, CAS v2, PAPI, OpenID | ||||||||||||||||
| ADFS 1.x | Microsoft | WS-Federation, WS-Trust, SAML 1.0 | ||||||||||||||||
| ADFS 2.0 | Microsoft | WS-Federation, WS-Trust, SAML 1.1/2.0 | ||||||||||||||||
| ADFS 2.1 | Microsoft | WS-Federation, WS-Trust, SAML 2.0 | ||||||||||||||||
| ADFS 3.0 | Microsoft | WS-Federation, WS-Trust, SAML 2.0, OAuth2 | ||||||||||||||||
| ADFS 4.0 | Microsoft | WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect | ||||||||||||||||
| Aerobase[5] | Aerobase | Integrated SSO and IDM for browser apps and RESTful web services. Built on top of the OAuth 2.0, OpenID Connect, JSON Web Token (JWT) and SAML 2.0 specifications[6] | ||||||||||||||||
| Afrilas[7] | Able - AXS Guard | SAML 2.0 Strong Authentication without usernames | ||||||||||||||||
| Asimba[8] | Asimba.org | (Fork of OpenASelect) | ||||||||||||||||
| AssureBridge SAMLConnect[9] | AssureBridge | SAML 1.1, SAML 2.0, OpenID, WS-Federation, Kerberos, Radius, X509, LDAP | ||||||||||||||||
| Auth0[10] | Auth0 | OAuth2, OpenID, SAML 1.1, SAML 2.0, WS-Federation, LDAP | ||||||||||||||||
| Authentic2[11] | Entrouvert | OpenID 1&2, CAS 1&2, OAuth2, LDAP 2&3, PAM, RADIUS, OATH, Kerberos, X509 | ||||||||||||||||
| AuthStack[12] | Buckhill | SAML 1.0, SAML 1.1, SAML 2.0, LDAP, Kerberos, X509, RADIUS, OAuth2, SOAP/REST API | ||||||||||||||||
| BIG-IP Access Policy Manager | F5 Networks | SAML 2.0 | ||||||||||||||||
| Bitium[13] | Bitium | SAML, SAML 2.0 | ||||||||||||||||
| CA Single Sign-On[14] | CA | SAML 1.0/1/1/2.0, OAuth2, OpenID, WS-Federation | ||||||||||||||||
| Central Authentication Server (CAS)[15] | Apereo Foundation | SAML 2.0, OAuth2, OpenID, WS-Federation | ||||||||||||||||
| Centrify DirectControl | Centrify | SAML, OpenID, OAuth, WS-*, LDAP, Kerberos | ||||||||||||||||
| Ceptor[16] | Ceptor | SAML 1.1/2.0, OAuth 2.0, WS-Federation, OpenID Connect, Kerberos | ||||||||||||||||
| cidaas[17] | cidaas by Widas ID GmbH | SAML 2.0, OAuth2, OpenID Connect | ||||||||||||||||
| Citrix Open Cloud[18] | Citrix | SSO Middleware, native service connectors | ||||||||||||||||
| Cloud Identity Manager | McAfee | SAML 2, OpenID, OAuth, XACML, LDAP v3, JM | ||||||||||||||||
| Cloud Federation Service[19] | Radiant Logic | SAML 2.0, WS-Federation, OAuth 2.0, OpenID | ||||||||||||||||
| Cloudseal[20] | Cloudseal | SaaS | ||||||||||||||||
| Cognito[21] | Amazon | SAML 2.0 | ||||||||||||||||
| Comfact IDP[22] | Comfact | |||||||||||||||||
| Signicat[23] | Signicat | |||||||||||||||||
| Corto https://sites.google.com/site/cortopages/ | Corto project home | GÉANT | ||||||||||||||||
| DACS[24] | Safran Identity & Security | SSO, OpenID Connect, OATH & OCRA, SMS, X509v3 Certificate, eID card, FIDO UAF, LDAP/AD, multi-factor | ||||||||||||||||
| Dot Net Workflow[25] | The Dot Net Factory | WS*-, WS-Federation, WS-Trust, OpenID, OAuth 2.0, Facebook, LinkedIn, Twitter, Yahoo, Windows Live (MSN) | ||||||||||||||||
| DirX Access[26] | Atos/Siemens | |||||||||||||||||
| DualShield[27] | Deepnet Security | SAML 2.0 | ||||||||||||||||
| Elastic SSO Team[28] | 9STAR | SAML 2.0 SAML 1.1 | ||||||||||||||||
| Elastic SSO Enterprise[29] | 9STAR | SAML 2.0 SAML 1.1 | ||||||||||||||||
| ESOE | Queensland University of Technology | |||||||||||||||||
| Entra ID (formerly known as Azure Active Directory) | Microsoft | SAML 2.0, WS-Federation, Kerberos Constrained Delegation, OAuth 2.0, OpenID Connect | ||||||||||||||||
| Entrust GetAccess[30] | Entrust | SAML 1.0, SAML 1.1, SAML 2.0 | ||||||||||||||||
| Entrust IdentityGuard[31] | Entrust | SAML 2.0, OpenID | ||||||||||||||||
| EIC[32] | Ericsson | |||||||||||||||||
| EmpowerID[33] | The Dot Net Factory | WS*-, WS-Federation, WS-Trust, OpenID, OAuth 2.0, Facebook, LinkedIn, Twitter, Yahoo, Windows Live (MSN) | ||||||||||||||||
| Evidian Web Access Manager | Evidian | SAML 1.1, SAML 2.0, OpenID Connect, CAS 1&2, OAuth2, LDAP v3, RADIUS, OATH, Kerberos, X509, Microsoft365, Google, Multi-factor, SSO, extended integration functionalities, Federation | ||||||||||||||||
| Fluig Identity | TOTVS | SAML 2.0 | ||||||||||||||||
| Forum Sentry[34] | Forum Systems | WS-Federation, WS-Trust, SAML 2.0, SAML 1.1, OAuth 1.0.a. OAuth 2, OpenID Connect | ||||||||||||||||
| Fugen Cloud ID Broker | Fugen Solutions | SAML 1.1, SAML 2.0, WS-Federation, WS-Trust, OpenID, and OAuth | ||||||||||||||||
| FusionAuth[35] | FusionAuth | SAML 2.0, OIDC, OAuth, LDAP | ||||||||||||||||
| GlobalSign[36] | GlobalSign SSO | GMO GlobalSign | SAML 2.0, ETSI MSS 102 204, TUPAS, WS-Federation, OpenID | |||||||||||||||
| Gluu Server[37] | Gluu | OpenID Connect, UMA, RADIUS, LDAP, FIDO, OAuth | ||||||||||||||||
| Hitachi ID Identity and Access Management Suite[38] | Hitachi ID Systems, Inc. | SAML 2.0 | ||||||||||||||||
| Horizon App Manager[39] | VMware | |||||||||||||||||
| HP IceWall SSO[40] | HP | SAML 2 | ||||||||||||||||
| ILANTUS Sign On Express[41] | Ilantus | SAML 2 | ||||||||||||||||
| Intel Cloud SSO[42] | Intel | SAML 2, OpenID, OAuth | ||||||||||||||||
| Ilex Sign&go<ref>Web site: Ilex. | ILEX | WS-Federation, WS-Trust, SAML 2.0, SAML 1.0, Shibboleth, CAS, Google, Microsoft365, Facebook, Kerberos, LDAP | ||||||||||||||||
| iSAML[43] | Avoco | SAML 2, WS-Trust, OpenID | ||||||||||||||||
| iWelcome[44] | iWelcome | SAML 2, SAML 1.0, WS-Trust, Kerberos, OAuth2, Facebook, google, includes provisioning from-to on-Prem, AD, Multi-factor, extended integration functionalities | ||||||||||||||||
| JOSSO (Community Ed.)[45] | josso.org | SAML2, OAuth2, WS-Trust, SPMLV2, Kerberos, JOSSO1 | ||||||||||||||||
| JOSSO (Enterprise Ed.)[46] | Atricore | SAML2, WS-Fed, OpenID Connect, OAuth2, WS-Trust, SPMLV2, Kerberos, JOSSO1 | ||||||||||||||||
| Juniper SSL VPN[47] | Juniper Networks | |||||||||||||||||
| Keycloak | JBoss | Integrated SSO and IDM for browser apps and RESTful web services. Built on top of the OAuth 2.0, OpenID Connect, JSON Web Token (JWT) and SAML 2.0 specifications[48] | ||||||||||||||||
| Layer 7[49] | SecureSpan Gateway | PDP/PEP, Auth2, SAML 1.1, SAML2, ABAC, OpenID Connect, XML Firewall | ||||||||||||||||
| Larpe[50] | Entrouvert | SAML, OpenID, CAS, OAuth | ||||||||||||||||
| LemonLDAP::NG[51] | LemonLDAP::NG | SSO, WS-Federation, CAS, OpenID-Connect, SAML-2, Twitter, Protocol proxy | ||||||||||||||||
| LoginRadius | LoginRadius | Web SSO, Federation SSO, SAML, OAuth, OIDC, WS-Federation, JWT | ||||||||||||||||
| MicroFocus (NetIQ) Access Manager[52] | NetIQ (formerly Novell) | + SP Broker | WS-Security, WS-Federation, WS-Trust, SAML 1.1 / 2.0, Liberty, Single Sign-on, RBAC, CardSpace, OAuth 2.0, OpenID, STS. Includes out of the box integration with cloud and social media providers (Office 365, Windows Live (MSN), Google, Facebook, Salesforce, Amazon web services and 200+ preconfigured connections to SaaS providers etc.) Integration for Advanced Authentication Framework | |||||||||||||||
| miniOrange | miniOrange | + Identity Broker | SAML 2.0, OAuth2, OpenID Connect, WS-Fed | |||||||||||||||
| NetWeaver Appserver[53] | SAP | CAS, OpenId, Twitter | ||||||||||||||||
| OneGate[54] | MobilityGuard | SAML 1.1, SAML 2.0 | ||||||||||||||||
| OpenAM | Open Identity Community https://github.com/OpenIdentityPlatform/OpenAM/, ForgeRock (ex. Sun) until 2016[55] | OpenID Connect, OAuth2, SAML 2.0, SAML 1.1, WS-Federation, WS-Trust, XACML, Liberty, Kerberos, Facebook, Google, Windows Live (MSN) | ||||||||||||||||
| Okta[56] | Okta | WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect | ||||||||||||||||
| OneLogin[57] | OneLogin | SAML, WS-Federation, Kerberos, OAuth, OpenID | ||||||||||||||||
| OpenAthens LA[58] | eduserv | |||||||||||||||||
| OpenAthens SP[59] | eduserv | |||||||||||||||||
| Open Select[60] | OpenASelect.org | OAuth (project continues as asimba) | ||||||||||||||||
| Optimal IdM VIS Federation Services[61] | Optimal IdM | + Proxy, SSO | WS-Federation, WS-Trust, SAML 1.x, SAML 2.0, OAuth2, OpenID Connect, SCIM, Facebook, Twitter, LinkedIn, Google, IWA, X509, Kerberos, LDAP, Office 365, RADIUS, MFA (Push, SMS, Email, Voice, TOTP, U2F, Radius) | |||||||||||||||
| Oracle Identity Federation 11g[62] | Oracle | WS-Federation, SAML 1.x, SAML 2.0, OpenID 2.0 | ||||||||||||||||
| Pega 7 Platform[63] | Pegasystems Inc. | SAML 2.0, OAuth, WS-Trust, LDAP | ||||||||||||||||
| PhoneFactor[64] | PhoneFactor, Inc | |||||||||||||||||
| PicketLink[65] | JBoss Community | OpenID, A-Select, CAS, XACML | ||||||||||||||||
| PingFederate[66] | Ping Identity | SAML 1.1, SAML 2.0, WS-Federation, WS-Trust, WS-Security, OAuth, OpenID Connect, OpenID, SCIM, Facebook, Twitter, LinkedIn, Google, Windows Live, Kerberos, IWA, X.509, LDAP, RADIUS, 3rd Party MFA | ||||||||||||||||
| Plurilock AI[67] | Plurilock | SAML 1.1, SAML 2.0, FIDO2, OTP, DEFEND[68] | ||||||||||||||||
| PortalGuard[69] | PistolStar, Inc. | SAML 2, LDAP v3, XML-DSIG, SSO Middleware | ||||||||||||||||
| RSA Federated Identity[70] | RSA | Facebook, OpenID, LinkedIn, Twitter, Windows Live | ||||||||||||||||
| SAASPASS | SAASPASS | WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect, LDAP | ||||||||||||||||
| Safewhere*Identify[71] | Safewhere | SAML 2.0, WS-Federation, WS-Trust, OAuth 2.0, multi-factor, OpenID Connect, Facebook, LinkedIn, Twitter, LiveID, Google, LDAP | ||||||||||||||||
| SailPoint IdentityNow[72] | SailPoint | SAML 1.1, SAML 2.0, OAuth2, Kerberos, WS-Federation | ||||||||||||||||
| Samanage[73] | Samanage | Enterprise-to-cloud SSO Middleware | ||||||||||||||||
| SATOSA[74] | SATOSA | Proxy between SAML2, OpenID Connect and OAuth2 | ||||||||||||||||
| SecureAuth[75] | SecureAuth Corp. | 2-Factor, IBM LTPA, Facebook, Google, LinkedIn, Microsoft FBA, Microsoft IWA, OAUTH, OpenID, OpenID Connect, SAML 1.1, SAML 2.0, Twitter, WebServices, Windows Live, X.509v3, Yahoo | ||||||||||||||||
| SecureSSO[76] | SurePassID | WS-Federation, WS-Trust, SAML 2.0, OAuth2, OpenID Connect, O365, SCADA - cloud & on-prem | ||||||||||||||||
| Shibboleth | Internet2 | SAML 1.1, SAML 2.0 | ||||||||||||||||
| SimpleSAMLphp[77] | UNINETT AS | OpenID, A-Select, CAS, WS-Federation and OAuth, Facebook, LinkedIn, Twitter, Windows Live, SAML 2 | ||||||||||||||||
| Smartsignin[78] | PerfectCloud | SAML 2.0, SAML 1.0, Google, Microsoft365, LDAP, WS-Federation | ||||||||||||||||
| SMS PASSCODE Multi-factor Authentication[79] | SMS PASSCODE | |||||||||||||||||
| SSO EasyConnect[80] | SSO Easy | |||||||||||||||||
| SSOgen | SSOGEN Corporation | SAML 1.1, SAML 2.0, OAuth2, OpenID Connect, OpenID Provider, RADIUS, LDAP, Multi Factor Authentication.Cloud SSO Solution for enterprises to protect on-premise applications such as SSOgen for Oracle EBS, SSOgen for PeopleSoft, SSOgen for JDE, and SSOgen for SAP, with a web server plug-in and Cloud SaaS applications with SAML, OpenID Connect integrations. | ||||||||||||||||
| Symlabs Federated Identity Suite[81] | Symlabs | OpenID, A-Select, CAS, WS-Federation and OAuth | ||||||||||||||||
| Symplified[82] | Symplified | SAML 1.1, SAML 2.0, WS-Federation, OpenID, OAuth, XACML, IBM LTPA, Microsoft IWA, 2-Factor, Facebook, Google, Twitter, ABAC / context-based AC | ||||||||||||||||
| Tivoli Federated Identity Manager[83] | IBM | WS-Federation, OpenID, Liberty, InfoCard, Microsoft CardSpace | ||||||||||||||||
| TrustBind[84] | NTT Software Corp | OpenID, ID-WSF | ||||||||||||||||
| TrustBuilder[85] | SecurIT | SAML 2.0, OAuth 2.0, OpenID Connect, Kerberos | ||||||||||||||||
| Trustelem[86] | Trustelem | SAML 2.0, OpenID Connect, WS-Fed, OAuth 2.0, Integrated Windows Authentication, Kerberos, Active Directory, LDAP, FIDO U2F. | ||||||||||||||||
| USP Secure Entry Server[87] | United Security Providers | SAML 2.0, SAML 1.0, Kerberos, NTLM, LDAP, RADIUS, RSA, SuisseID, RBAC, SSO, Tomcat Authenticator, IIS ISAPI Filter, mTAN, PKI/X.509, Reverse Proxy, Multi-Factor, SOAP/REST Connectors, WebService Security, Office365, GoogleApps | ||||||||||||||||
| Weblogic | Oracle | |||||||||||||||||
| WSO2[88] | wso2 | OAuth2, WS-Trust, OpenID | ||||||||||||||||
| ZITADEL[89] | ZITADEL | SAML 2.0, OpenID Connect 1.0, OAuth 2.0, FIDO2, OTP, U2F | ||||||||||||||||
| ZXID[90] | zxid | ID-WSF2, XACML2, WS-Security, XML-DSIG, TAS3 | ||||||||||||||||
Libraries and toolkits are used by developers to integrate applications and services into SAML federations or to build their own SAML-actors like IdPs.
| Libraries and Toolkits | Organization | Licence | Purpose and Language bindings | |
|---|---|---|---|---|
| Australian Access Federation[91] | Australian Access Federation | Metadata Registry based on former work by SWITCH | ||
| ComponentSpace[92] | ComponentSpace | SAML libraries for ASP.NET and ASP.NET Core applications | ||
| Corto[93] | WAYF | SAML2 proxy, virtual IdP, user consent | ||
| DjangoSAML2[94] | GitHub | SAML2 application for Django, using PySAML2 underneath | ||
| EmpowerID IdP & SP Kit[95] | Dot Net Factory | IdP and SP Kit, .NET, REST, and SOAP-based integration kit to SAML-enable applications | ||
| FEMMA[96] | SourceForge | Workaround for the ADFS limitation of a single EntityID per XML infoset | ||
| Firefox ECP Plugin[97] | Openliberty | Firefox extension for compliance with SAML ECP | ||
| FLOG F-Ticks Vizualization[98] | SUNET | Parse and chart F-Ticks for webSSO and Eduroam (sample site: http://flog.sunet.se/) | ||
| Jagger[99] | HEAnet | Metadata and Federation data manager; Shibboleth IDP GUI | ||
| JAKOB[100] | WAYF | Backchannel attribute collector | ||
| JANUS[101] | WAYF | Metadata Registry for hub-and-spoke federations based on SimpleSAMLphp; includes self-service | ||
| Jitbit ASP.NET SAML lib[102] | GitHub | SAML 2.0 "consumer" component for ASP.NET | ||
| Lasso[103] | Entrouvert | SAML-Library: C/C++, Python, Java, Perl, PHP | ||
| LightSAML core[104] | SAML-Library: PHP | |||
| OIOSAML 2.0 Toolkit[105] | Danish IT and Telekom Agency | SP Framework: Java, .NET,[106] PHP (Documentation see OIOSAML.java) | ||
| OmniAuth-Shibboleth[107] | OneLogin | SAML-Library: ASP/.NET, Java, PHP, Python, Ruby | ||
| OneLogin[108] | OneLogin | SAML-Library: ASP/.NET, Java, PHP, Python, Ruby | ||
| OpenConext[109] | SURFnet | Service Provider Proxy and Hub-and-Spoke federation middleware, includes SAML proxy and central group management for creating collaboration platforms | ||
| OpenSAML[110] | Internet2 | SAML-Library: C++, Java | ||
| MET[111] | gathers and shows information about federations (mostly about SPs and IdPs) | |||
| Mujina[112] | SAML test actors that can be dynamically configured using a REST interface | |||
| PAC4J-SAML[113] | SAML Service Provider Library (and other authentication mechanisms) | |||
| PEER[114] | GÉANT | SAML Metadata Registry | ||
| PHPH[115] | WAYF.dk | SAML Metadata Processor | ||
| Ping Identity[116] | Ping Identity | Java, .NET, PHP and language neutral integration kits to SAML-enable applications | ||
| PySAML2[117] | GitHub | SAML-Library: Python | ||
| Python-SAML | OneLogin | SAML-Library: Python | ||
| Pysfemma[118] | GitHub | automate membership configuration of an ADFS STS in a SAML2 based Identity Federation | ||
| PyFF[119] | SUNET | SAML Metadata Processor | ||
| Raptor[120] | Jisc | toolkit to enable Shibboleth IdP statistics analysis | ||
| SAML Metadata Aggregator[121] | NORDUnet | Aggregates single metadata files and provides MDX webservice | ||
| SAML Tracer (Firefox addon)[122] | UNINETT AS | Firefox Plug-In to trace SAML messages | ||
| SecureBlackbox[123] | /n software | The component that implements SAML in client apps, which need to use service providers, or can be used to create your own service and identity providers | ||
| SpringSecurity SAML[124] | SpringSource | SAML-enable applications based on Spring framework | ||
| Switch GMT[125] | SWITCH-AAI | Group Management Tool for Shibboleth | ||
| Webisoget[126] | Command-line Tool to fetch a SSO-protected page including Shibboleth-Login | |||
| ZXID[127] | zxid | C, other lang using swig.org |
This section lists public services such as identity and attribute providers, metadata and test services, but *not* SAML-enabled web-applications and cloud services.
| Service | Organization | Purpose | |
|---|---|---|---|
| 9STAR[128] | 9STAR | 9STAR Managed Services for Shibboleth/SAML SSO On-Premises or Cloud | |
| 9STAR[129] | 9STAR | 9STAR Shibboleth/SAML SSO Support Services | |
| Acrot A-OK[130] | Arcot | IdP (+ Fraud detection) | |
| eduTEAMs[131] | SURFnet | Federation enabled Group management service which acts as an Attribute Authority for group relations | |
| Federation Lab[132] | GÉANT | Test-SP, metadata registry, test tools | |
| Feide OpenIdP[133] | UNINETT AS | IdP that allows any user to register, and any SP to connect | |
| Gazelle IHE validator[134] | Gazelle | SAML Assertion Validation | |
| Gluu On-Prem Managed Service[135] | Gluu | IdP for SAML and OpenID Connect-enabled cloud services | |
| Identity Hub[136] | Entrouvert | Free IdP; Any user and any SP | |
| OneLogin SSO[137] | OneLogin | IdP for SAML- and OpenID-enabled cloud services | |
| REEP[138] | GÉANT | Public metadata registry | |
| PhoneFactor[139] | PhoneFactor Inc. | IdP/cloud SSO | |
| PingOne[140] | Ping Identity | Cloud Access and Application Provider Services for IdPs and SPs | |
| SAASPASS | SAASPASS | IdP, IdM, Multi-Protocol STS (multiple claims based integrations including SAML 1.1, 2.0 SP SSO, 2.0 IdP SSO, OpenID Connect, .NET, CA SiteMinder and others | |
| SamlComponent.net[141] | SamlComponent | SAML Resources for Developers | |
| samlidp.io[142] | Kitek Media Kft. | SAML Identity Provider as a Service | |
| SecureAuth[143] | SecureAuth Corp. | IdP, IdM, Multi-Protocol STS (multiple claims based integrations including SAML 1.1, 2.0 SP SSO, 2.0 IdP SSO, OpenID, .NET, CA SiteMinder and others | |
| SSOCircle[144] | SSOCircle | Free IdP | |
| Testshib[145] | Internet2 | IdP and SP for testing | |
| UnitedID[146] | United ID Services | Free IDP service | |
| Verizon Web Access Management[147] | Verizon Business | IdP | |
| ZXID[148] | zxid.org | Free IdP |