Sold by: miniOrange
Deployed on AWS
AWS Free Tier
Build a strong defence around all your on-premise applications. The miniOrange Identity and Access Management (IAM) platform, with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions, helps secure user account access for on-prem infrastructure.
4.6
Overview
miniOrange Identity and Access Management (IAM) platform offers a comprehensive suite of products such as Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions, which are developed for identity management, access control, and layered defences, to scale your businesses, and to easily secure workforce identity, including employees, partners, and clients.
Our on-premise IAM solution adheres to a range of regulatory compliances, such as GDPR, PCI DSS, and more. It is developed to withstand malicious cyber threats and unauthorized account access through strong granular policy frameworks.
Use miniOrange on-premise IAM with AWS Integrations, along with AWS IAM, AWS Organizations, AWS SSO, AWS Session Tags, and Amazon Control Tower.
On-Premise IAM Solution includes:
- Single Sign-On (SSO): Enable secure and effortless access to on-premise resources and 5000+ applications with just a single set of credentials with role-based access.
- Multi-Factor Authentication (MFA) & Passwordless Access MFA solution adds an extra layer of security and also enforces passwordless access via authentication methods, like OTP, TOTP, biometrics, push notifications, and hardware tokens.
- Identity Brokering & Federated Authentication Authenticate users from third-party Identity Providers (IDPs), like Entra ID, Active Directory (AD), or Google, for better on-prem access via a Single Sign-On solution.
- User Lifecycle Management & Provisioning Maximize productivity and manage workforce and customer identities with automated SCIM-based user provisioning and deprovisioning.
Highlights
- Unified Identity Platform: miniOrange Single Sign-On solution delivers security and the speed you need to manage your users access to your applications and data all in one place.
- Focused Advanced Security: Our on-premise identity management provides critical low latency and reliability for performance-sensitive advanced security, enabling immediate threat response and superior control.
- Customized Products: Tailor IAM products like SSO and MFA solutions for better integration with operational workflows, delivering a customized identity management solution for your security posture.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
AmazonLinux Amazon Linux 3
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
30 Day Free Trial
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
miniOrange IDP - Getting Started Guide
Prerequisites
Before launching, ensure your EC2 Security Group has the following inbound rules:
| Port | Protocol | Description |
|---|---|---|
| 22 | TCP | SSH access |
| 443 | TCP | HTTPS (application) |
Step 1 - Launch the AMI
Launch the instance from AWS Marketplace. Once the instance is in Running state, note the Public IP address.
Step 2 - Access the Application
Open your browser and navigate to:
https://<your-public-ip>You will see a browser warning for the self-signed certificate - this is expected. Accept and proceed.
Step 3 - Complete First-Time Setup
The setup wizard will ask for your database, cache, and message queue connection details. All services are pre-installed and running locally on the instance. Use the following values:
Database (PostgreSQL)
| Field | Value |
|---|---|
| Host | localhost |
| Port | 5432 |
| Database | miniorange |
| Username | postgres |
| Password | (see /home/ec2-user/ami.env.sh on the server) |
Cache (Redis)
| Field | Value |
|---|---|
| Host | localhost |
| Port | 6379 |
Message Queue (RabbitMQ)
| Field | Value |
|---|---|
| Host | localhost |
| Port | 5672 |
| Username | admin |
| Password | (see /home/ec2-user/ami.env.sh on the server) |
Complete the wizard and save the configuration.
Step 4 - Restart Services
After saving the setup, SSH into the instance and restart all microservices so they pick up the new configuration:
ssh -i your-key.pem ec2-user@<your-public-ip> sudo moctl service restartWait about 2-3 minutes, then refresh the application in your browser.
Step 5 - Verify Everything is Running
All services should show as active/running.
Optional - Set Server Base URL (Branding)
If you want to use a custom domain (e.g. <https://sso.yourcompany.com>) instead of the public IP:
- Log in to the miniOrange IDP admin console
- Click the gear icon in the top-right corner
- Go to Settings
- Update Server Base URL with your desired domain or IP
- Save
If using a custom domain, ensure your DNS points to this instance's public IP and update your SSL certificate in /etc/nginx/conf/.
Connection Details Reference
All service connection details are stored on the instance at:
/home/ec2-user/ami.env.shSSH into the instance and run:
sudo cat /home/ec2-user/ami.env.shSupport
For assistance, contact miniOrange support at idpsupport@xecurify.com
Resources
Vendor resources
Support
Vendor support
Get 24*7 technical support from miniOrange seasoned engineers to effectively use IAM products and services. Our support team is available via email and phone to assist with troubleshooting, configuration, and deployment. Email Support: idpsupport@xecurify.com or Call us on +1 978 658 9387 (US) / +91 97178 45846 (India)
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
miniOrange Identity and Access Management (IAM) solution is built to secure workforce identity and manage B2B access for users, devices, and applications across on-premise infrastructure.
The miniOrange Cloud IAM helps securely manage user access and permissions across the entire cloud environment. The platform includes Single Sign-On (SSO), Multi-Factor Authentication (MFA), adaptive authentication, passwordless login, SCIM provisioning, and identity federation, all designed to strengthen security, adhere to the zero trust principle, simplify access, and support compliance requirements.
miniOrange CASB controls access to cloud applications, protecting your data from unauthorized sharing. Gain real-time visibility, enforce data protection measures, and detect threats seamlessly within your AWS infrastructure. Solve Workplace access security problems for Google Workspace, Microsoft Office suite, Atlassian, Shopify or any app.
miniOrange's PAM solution ensures robust Privileged Access Management across cloud, on-premises, and hybrid environments. Here’s how it benefits your business: enhances visibility, streamlines deployment, and automated processes, and boosts security, along with risk minimization. It enables companies to securely manage, control, and monitor privileged access anywhere in the digital infrastructure.
Customer reviews
Daniele T.
miniOrange Enabled Legacy Access Gateway and Unified Federated Identity Across Regions
Reviewed on Jul 10, 2026
Review provided by G2
What do you like best about the product?
We have 7,500 employees across 12 countries, with a mix of cloud services and legacy on-premise systems, multiple regional AD domains, a large contractor population, and compliance requirements spanning ISO 27001, SOX, and GDPR across subsidiaries. A key requirement was an Access Gateway for legacy manufacturing execution systems—some running on infrastructure that’s a decade old and has no native SAML or OIDC support—which ruled out most other vendors. miniOrange met that need without requiring any changes to application code. Federated identity across our European, Asian, and North American AD instances was also handled well, bringing all three into a single, unified identity broker.
What do you dislike about the product?
I was hoping for more native SIEM integration to support real-time identity event streaming. Right now, we have to pull logs on a scheduled basis, which introduces latency and slows down our threat detection workflows. My understanding is that this is on the roadmap.
What problems is the product solving and how is that benefiting you?
Our IAM setup used to be decentralized by region, with each country managing its own access controls, MFA policies, and provisioning independently. A global security audit flagged this as a critical issue. miniOrange provided a centralized control plane without forcing us to replace the regional AD infrastructure that each subsidiary had built over the years. We can now enforce a global MFA policy, a least-privilege standard, and a consistent offboarding process across the organization. Contractor access management is also time-bound and expires automatically at the end of a project, which has removed a significant manual deprovisioning burden. On cost, compared with enterprise IAM alternatives, it came in roughly 40–50% lower for equivalent core functionality.
Gregory Y.
The MFA That worked Well for Remote Teams
Reviewed on Jul 06, 2026
Review provided by G2
What do you like best about the product?
miniOrange has helped us secure access for remote employees across Microsoft 365, our VPNs, and internal applications. The platform supports multiple authentication methods and lets us apply different policies depending on the user and the access requirements. Deployment was straightforward, and our users adjusted to it quickly.
What do you dislike about the product?
The initial setup takes some planning, especially when you’re configuring policies for different applications and user groups. A few of the more advanced settings needed extra testing before I felt comfortable deploying them, but once everything was in place, day-to-day management has been straightforward.
What problems is the product solving and how is that benefiting you?
As more of our employees began working remotely, we needed stronger access controls without turning the login process into something complicated. miniOrange helped us roll out MFA and adaptive authentication across our applications. Since then, account security has improved, we have better visibility into login activity, and we’re able to manage access more effectively overall.
Andy S.
miniOrange SSO: Robust Security, Compliance, and Audit-Ready Authentication Logs
Reviewed on Jul 01, 2026
Review provided by G2
What do you like best about the product?
We operate in the financial services sector, so security and compliance are non-negotiable. The miniOrange SSO solution has been instrumental in helping us meet HIPAA and PCI-DSS compliance requirements. It offers granular control over authentication policies, including risk-based access and conditional access rules. It also logs every authentication event, access change, and policy modification in detail, which is essential for our compliance audits and regulatory examinations.
What do you dislike about the product?
The user interface is functional, but it feels a bit dated compared to more modern SaaS applications. Navigation also takes several clicks for common tasks, which can slow things down. A refreshed UI with stronger UX patterns would streamline the admin experience and make it even better overall.
What problems is the product solving and how is that benefiting you?
miniOrange addressed this by providing centralized identity and access management with complete audit trails. Now, when we terminate an employee, access to all systems is revoked within minutes through automated workflows. Our compliance audit process, which used to take 3–4 weeks, now takes 3–4 days because we have full visibility and clear documentation.
Michael C.
Seamless Oracle EBS SSO Integration with Helpful Support
Reviewed on Jun 24, 2026
Review provided by G2
What do you like best about the product?
The best part of miniOrange is how smoothly it integrated with our Oracle E-Business Suite environment. We were able to enable Single Sign-On using our existing identity provider without needing major changes to Oracle EBS. The setup process was straightforward, and both the documentation and the support team were helpful throughout the implementation. As a result, users now have a seamless login experience, while IT benefits from centralized authentication and stronger security controls.
What do you dislike about the product?
The initial configuration required a solid understanding of Oracle EBS authentication flows, which could be challenging for teams without prior IAM experience. That said, the support team was responsive and guided us through the setup process. Since then, we haven’t encountered any major issues.
What problems is the product solving and how is that benefiting you?
Before we implemented miniOrange, users had to maintain separate credentials for Oracle EBS, which led to frequent password-related support tickets and a fragmented login experience. After enabling Single Sign-On, they can access Oracle EBS with their corporate credentials, reducing login friction and helping them stay productive. Centralized authentication has also strengthened security, simplified user management, and supported our efforts to align with access governance requirements.
Marketing and Advertising
Disappointing Support and Refund Experience
Reviewed on Jun 17, 2026
Review provided by G2
What do you like best about the product?
What I liked best is that miniOrange offers a wide range of identity, access management, security, and integration-related solutions under one provider. The company appears to cover important business needs such as secure login, Single Sign On, authentication, and platform integrations, which can be valuable for businesses that need connected systems.
In my case, I did not use miniOrange specifically for Identity & Access Management; my experience was with the Product Sync for WooCommerce plugin. However, I can see the value of having security and integration tools available from one provider, especially for businesses using WordPress and WooCommerce.
In my case, I did not use miniOrange specifically for Identity & Access Management; my experience was with the Product Sync for WooCommerce plugin. However, I can see the value of having security and integration tools available from one provider, especially for businesses using WordPress and WooCommerce.
What do you dislike about the product?
What I disliked was the overall support and refund experience. Although my issue was not specifically with the Identity & Access Management product, my experience with miniOrange affected my confidence in the company’s service quality.
I had difficulty getting the Product Sync for WooCommerce plugin to work, and after requesting a refund, the process felt slow and rigid. I was later told that the refund could not be processed because of a 10-day policy. For a company offering business-critical tools such as identity, access management, secure login, and integrations, I would expect faster resolution, clearer support, and a more customer-focused approach when a paid product does not work as expected.
I had difficulty getting the Product Sync for WooCommerce plugin to work, and after requesting a refund, the process felt slow and rigid. I was later told that the refund could not be processed because of a 10-day policy. For a company offering business-critical tools such as identity, access management, secure login, and integrations, I would expect faster resolution, clearer support, and a more customer-focused approach when a paid product does not work as expected.
What problems is the product solving and how is that benefiting you?
miniOrange Identity & Access Management is designed to solve important problems such as secure user login, Single Sign On, authentication, access control, and managing how users connect to business systems.
In principle, this can benefit a business by improving security, reducing login friction, and making access to different platforms easier to manage. For companies using WordPress, WooCommerce, and other connected systems, these types of tools can help reduce manual work and create a more secure digital environment.
However, in my case, I did not directly benefit from miniOrange Identity & Access Management because my experience was with the Product Sync for WooCommerce plugin. Since that plugin did not work as expected for my business and the refund process was disappointing, I cannot say that miniOrange solved a problem for me personally.
In principle, this can benefit a business by improving security, reducing login friction, and making access to different platforms easier to manage. For companies using WordPress, WooCommerce, and other connected systems, these types of tools can help reduce manual work and create a more secure digital environment.
However, in my case, I did not directly benefit from miniOrange Identity & Access Management because my experience was with the Product Sync for WooCommerce plugin. Since that plugin did not work as expected for my business and the refund process was disappointing, I cannot say that miniOrange solved a problem for me personally.