The Cirrus Identity SAML Bridge allows you to leverage commercial identity solutions like Microsoft Azure AD, Okta, and Google and join national research and education identity federations like InCommon and other eduGAIN members.
Cirrus Identity is the Swiss army knife of digital identity management. We offer a suite of managed solutions that help organizations streamline access to digital resources for enterprise users and customers.
The Cirrus SAML Bridge is key for connecting Higher Ed and Research Identity Providers to national and international multilateral federations like InCommon and eduGAIN. If you use Microsoft Azure AD, Okta, or Google as your organization SAML Identity Provider, the Cirrus Bridge enables you to join a national federation like InCommon, the Canadian Access Federation, the UK Federation, etc. without running and managing any software locally.
National identity federations like InCommon provide trust frameworks that enable application providers to implement trusted SSO across multiple organizations at once.
Many commercial identity solutions, like Microsoft Azure AD, Okta, and Google do not support participation in multilateral federation.
The Cirrus SAML Bridge fills this gap!
The Cirrus Identity team collects some information about your organization and sets up your Bridge instance. We then walk you through configuration within the admin portal for the primary identity solution (Azure AD, Okta, Google), as well as registration of your Identity Provider in your national federation, like InCommon.
Standard pricing listed below includes only pricing for EDU, as this product is rarely needed outside the EDU market. Additional pricing tiers are available via Private Offer.
Highlights
Federation without Frustration! Leverage your existing SSO solution and join InCommon or other identity federation
Easy configuration! All configuration takes place within the admin portal for your enterprise SSO solution, such as Microsoft Azure AD, Okta, or Google
Quick implementation! Set-up usually takes 2-4 weeks, and with our Custom DNS Add-on, you can keep your existing InCommon (or other federation) registration
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You buy this product on an annual contract priced by the number of authentications per year. Authentication is the login event when a user signs in. Three tiers are available: 3,000,000, 4,500,000, and 6,000,000 authentications per year. You pick the tier that fits your expected yearly login volume. The count is annualized, so seasonal peaks and quiet periods average out across the year. As your login volume grows, you move to a tier with a higher authentication allowance.
Top-of-mind questions for buyers
What counts as one authentication for billing purposes?
An authentication is a single login event, when a user signs in with their institutional credentials to reach an application through the Bridge. Each sign-in counts as one. The tiers count total authentications across a full year, so all login events during the term add up toward your tier allowance.
What happens if my login volume rises above my chosen tier during the year?
The tiers act as annualized usage levels. Cirrus Identity annualizes authentications, so seasonal peaks and quiet periods average across the year rather than triggering charges at any single moment. If your averaged yearly volume grows past your tier, you move to a tier with a higher authentication allowance.
Does the authentication tier include support for federation and non-federation applications?
The base Bridge subscription includes integration with InCommon, Canadian Access Federation, or GakuNin applications, plus up to 10 non-federation applications. Support for additional applications beyond that count is available separately. The service is cloud hosted with 24x365 production support, so you avoid running your own on-premises infrastructure.
www.cirrusidentity.com+1
Helpful?
Vendor refund policy
In the event Customer elects to terminate this Order prior to subscription end date, Customer is entitled to receive a pro rata refund of any pre-paid annual subscription fees based on the number of full prepaid calendar months remaining in the term. One-time implementation fees are not refundable.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
The Cirrus Identity SAML Bridge for DUO allows you to register your Cisco DUO SSO service with national research and education identity federations like InCommon and other eduGAIN.
The Cirrus Identity CAS Bridge allows you to integrate legacy CAS applications with a SAML-based SSO solution like Microsoft Azure AD, Okta, or Google.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.