Ory Generic SAML 2.0 Integration

A Generic SAML 2.0 Service Provider (SP) is an application that relies on an external Identity Provider (IdP) to authenticate users via the SAML protocol

Read docs Visit GitHub

Ory Generic SAML 2.0

Benefits with Ory + Ory Generic SAML 2.0 Integration

Integrating a Generic SAML 2.0 Service Provider with Ory allows you to use Ory as your central Identity Provider (IdP). This enables seamless Single Sign-On (SSO) across any SAML-compliant enterprise application, eliminating the need for users to manage separate credentials. By centralizing identity management with Ory, you ensure consistent access control policies, enhance overall security, and streamline the onboarding process for new applications. This capability provides maximum flexibility, allowing you to securely connect your users to a vast ecosystem of third-party services while avoiding vendor lock-in

Use Cases

— 01 use case

B2B IAM

Solves the challenge of fragmented enterprise access by enabling seamless Single Sign-On across any SAML-compliant application, centralizing B2B identity management

Explore B2B IAM

Core Functionality

— 05 capabilities

Standardized SP Architecture
Configures Ory Polis as the Service Provider (SP) against any generic SAML Identity Provider (IdP).
Flexible Metadata Exchange
Supports XML metadata uploads, URL consumption, or manual configuration of entity IDs and certificates.
Custom Attribute Mapping
Maps attributes released by the IdP directly to standardized Ory identity traits.
SP-Initiated SSO Support
Securely handles SP-initiated authentication flows to ensure consistent session context.
Comprehensive Documentation
Provides centralized, authoritative guidance for configuring generic SAML integrations

Frequently Asked Questions

How does the Generic SAML 2.0 enterprise SSO integration work with Ory?

Ory acts as the Service Provider (SP), consuming SAML or OIDC assertions from the external Identity Provider (IdP).

Can I enforce MFA with the Generic SAML 2.0 and Ory integration?

MFA is typically delegated to the upstream IdP, while Ory manages the resulting authenticated session.

Does the Generic SAML 2.0 integration with Ory support IdP-initiated SSO?

Ory primarily supports SP-initiated SSO flows for enhanced security and session context

More Ory Integrations

Generic OIDC Provider
Integrate with any generic OIDC provider

Go to integrations

More Enterprise SSO Integrations

Go to integrations

Ory Generic SAML 2.0 Integration

Benefits with Ory + Ory Generic SAML 2.0 Integration

Use Cases

B2B IAM

Core Functionality

Standardized SP Architecture

Flexible Metadata Exchange

Custom Attribute Mapping

SP-Initiated SSO Support

Comprehensive Documentation

Frequently Asked Questions

More Ory Integrations

Generic OIDC Provider

More Enterprise SSO Integrations

Google Workspace Directory Sync

Google Workspace SAML

Microsoft AD FS

Microsoft Entra ID (Azure AD)