Kontakt
EnglishEnglish
DeutschDeutsch

SimpleSAMLphp – a Versatile Key Tool for Federated IAM

Logo: SimpleSAML php

What Is SimpleSAMLphp?

SimpleSAMLphp is an open source product which enables (federated) authentication and authorization for web applications across organizations. Some European university federations are exclusively using SimpleSAMLphp.

Based on the XML standard SAML (Security Assertion Markup Language), SimpleSAMLphp enables Single Sign-On (SSO). This means that, within a federation, a user only needs to authenticate themselves once in order to access multiple services that are subject to registration.

Initially developed by employees of the Norwegian research network Uninett, today the project SimpleSAMLphp is in the hands of a large open source community.

SSO with SimpleSAMLphp

Single Sign-On (SSO) describes a procedure of authentication which allows a user to log in only once in order to access multiple services, for which they would otherwise need multiple accounts or have to go through multiple authentication processes.

SimpleSAMLphp is an implementation of the well established SAML protocol. The SAML protocol allows the use of a single account for a variety of web services on the internet or within the intranet of your organization. Additionally, it is possible to allow your users to remain logged in for a predetermined amount of time. No matter what other services within your system your users need to access within the given time span – they are already logged in and the application receives all the needed information (attributes) to set new authorizations for the user if necessary.

Photo: Peter Gietz writing on a Whiteboard

Why Use SimpleSAMLphp?

All in all, SimpleSAMLphp offers a slightly reduced selection of the features offered by Shibboleth. Out of the box, its functionality is limited in comparison, but changes in configurations are easier to implement, which makes SimpleSAMLphp commonly the first choice for a proof of concept.

It is well suited for AAI proxys as well, since it implements both, the Identity Provider and the Service Provider.

SimpleSAMLphp is based entirely on PHP, which makes it a perfect fit for the integration of PHP applications. Unlike the Shibboleth SP, the SP module of SimpleSAML has an integrated IdP discovery service, which allows you to attach and select multiple IdPs.

What SimpleSAMLphp Services Does DAASI International Offer?

DAASI International is an experienced specialist in the field of SSO solutions that perfectly match your wants and needs. Throughout numerous IAM projects, DAASI International has implemented SSO solutions for many of her customers.

The services DAASI International offers with regard to SimpleSAMLphp include:

Foto: CFO Karin Gietz
  • Consulting: DAASI International supports you in determining whether and how SimpleSAMLphp is best suited for your project, especially in comparison to other open source options like Shibboleth or SATOSA.
  • Setup: DAASI International will install SimpleSAMLphp on your system if desired.
  • Maintenance/Support: You chose SimpleSAMLphp and need support? DAASI International will be with you beyond the phase of integration, even offering SimpleSAMLphp as a managed service.
  • Proof of Concept: DAASI International is happy to assist you with your feasibility report or with building up your proof of concept.

You’re looking for consulting, support or training with respect to SimpleSAMLphp?

As your expert, DAASI International is happy to assist you anytime.

Contact us!
keyboard_arrow_up
WordPress Cookie Plugin by Real Cookie Banner