OryPolisIdentity Federation and SAML-to-OIDC Bridge

The identity federation engine that bridges legacy SAML to modern OIDC and adds SCIM directory sync — so your B2B and B2B2C SaaS app speaks one protocol while accepting every enterprise IdP. Federate with any SAML 2.0 provider through a single API.

Identity federation is the protocol layer behind Enterprise SSO — and it's typically where B2B SaaS engineering teams lose months to SAML edge cases. Ory Polis handles the federation problem in days, not months.

Need support?

Ory Polis is available via Ory Enterprise License: self-hosted control + 24x7 support.

Need to move quickly?

Get the power of Ory Polis fast and easily via the Ory Network. Sign up for free!

Identity federation for B2B SaaS apps

Ory Polis handles the protocol layer behind every Enterprise SSO integration — SAML, OIDC, and SCIM — so your engineering team ships the federation features your enterprise customers contractually require without becoming SAML experts.

SAML-to-OIDC federation

Federate SAML identity providers through a single OIDC integration in your app. Polis translates SAML assertions, attribute mappings, and metadata into the OAuth 2.0 / OIDC tokens your existing auth stack already understands. From first line of code to production in days.

Self-service IdP onboarding

Enterprise IT admins configure their own identity provider connections through branded, secure self-service portals — no engineering ticket per customer, no per-partner SAML XML editing. New enterprise customers go from contract signing to production federation in minutes.

SCIM directory sync

SCIM 2.0 provisioning synchronizes accounts and groups from corporate directories automatically. When an admin adds a user in their IdP, that user appears in your B2B SaaS app without manual administration — through the same unified federation API.

Ory Polis identity federation feature set

• Multi-tenant organizations

Group customer organizations within your B2B SaaS, manage their federation connections independently, and enforce domain-based authentication that routes users to their organization's IdP.

• OIDC single sign-on

Establish OpenID Connect (OIDC) federation connections per organization, configurable through Ory Console or API. Polis's OIDC federation is the same protocol your existing OAuth-based auth stack already speaks.

• SAML identity provider support

Federate with every major SAML-based identity provider — Microsoft Entra ID, Microsoft ADFS, Okta, Auth0, Google Workspace, Ping Identity, JumpCloud, and any SAML 2.0–compliant IdP. Polis handles the protocol differences so your app never has to.

• SAML to OIDC bridge

The SAML-to-OIDC bridge is Polis's structural differentiator — cross-protocol identity federation that translates legacy SAML into modern OIDC tokens. Your app uses one protocol (OIDC) while accepting connections from every enterprise IdP, regardless of what protocol they speak.

• Identity provider discovery and routing

Route users to their organization's federation IdP automatically based on email domain. Eliminates the 'choose your SSO provider' selection step that adds friction at the login UX layer.

• Flexible federation deployment

Deploy Polis where your data residency, compliance, or sovereignty requirements take you — self-hosted, private cloud, on-premises, air-gapped, or fully-managed on Ory Network. The deployment flexibility no SaaS-only federation vendor offers.

How to de-risk identity at scale with Ory

OSS is where most teams start. The question is whether it holds up as scale, compliance, and security requirements grow. Running identity infrastructure yourself means owning everything, from patches to incident response, compliance controls, and performance tuning. At enterprise scale, that overhead competes with product innovation. Ory's commercial offerings, OEL and Ory Network, trade that burden for SLA-backed support, managed CVE patching, and audit-ready controls.

Ory Polis FAQ

What is Ory Polis?

Ory Polis is an open-source enterprise Single Sign-On (SSO) service for SAML and OIDC identity providers. It abstracts the complexity of the SAML and OIDC protocols by presenting them as a standard OAuth 2.0 flow. It is available as open-source software, under the Ory Enterprise License for self-hosted production, and as part of the fully managed Ory Network.

What business benefits does Ory Polis provide?

• Accelerated Time-to-Market - Ory Polis transforms months of complex SAML/OIDC engineering into a few days of work. By using a "SAML-to-OIDC bridge," developers can integrate enterprise SSO using a familiar OAuth 2.0 flow rather than learning legacy protocols.
• Reduced Sales Friction - Polis provides a self-service configuration portal. This allows your enterprise customers' IT teams to set up their own SSO connections and identity providers (like Okta, Azure AD, or Google Workspace) without needing manual support from your engineering team.
• Automated User Management - Through Directory Sync (SCIM 2.0), Ory Polis automates the provisioning and de-provisioning of users. When an employee leaves a client’s company, their access to your app is automatically revoked, ensuring security and reducing administrative overhead.
• Flexible Data Residency - Unlike "black box" identity providers, Ory Polis offers deployment flexibility. Businesses can choose to host it themselves to meet strict data residency requirements or use the fully managed Ory Network.