HelixIAM by KubeDNA

SSO & federation

One sign-in for every application you run.

A standards-based OpenID Connect and OAuth 2 provider and a SAML 2.0 identity provider, connected to the directories and providers you already have.

What you get

Standards-based SSO

Single sign-on and single logout across OIDC and SAML apps.

  • OpenID Connect and OAuth 2 provider
  • SAML 2.0 identity provider for your existing applications
  • Pushed authorization requests, token exchange and device-code sign-in

Bring identities in

Connect your existing LDAP or Active Directory, and broker sign-in from other OIDC, SAML and social identity providers.

  • LDAP / Active Directory
  • OIDC, SAML and social brokering
  • SCIM 2.0 provisioning, inbound and outbound

Multi-tenant by design

Each tenant gets its own realm, users, keys and branding.

  • Organisations within a realm for B2B: membership, branding and claims
  • Fine-grained admin permissions and per-tenant administrators
  • Audience-restricted tokens with resource indicators

Plan your federation landscape with us.

Map your applications, directories and providers to HelixIAM in an architecture consultation.