Hacker News Reader

Out of curiosity, which SSO service providers allow end-customer to self-configure the SAML integration? Essentially every service that I have seen the SAML integration is only configurable by the service provider and often there isn't even API that could be used to let SP expose the functionality.

View on HN

WorkOS provides this via the "Admin Portal." https://workos.com/admin-portal

It's essentially a hosted UI that allows end-customers to fully configure SSO/SCIM/etc.

Demo: https://demo.workos.com/

(I work at WorkOS. :))

This is actually something we’re working on at PropelAuth[0]. Our general philosophy is that most SP’s don’t want to deal SAML and would prefer to just have their users manage their own org membership - whether that’s via SAML, invitations, etc.

We haven’t built an API for it though, instead opting for a UI that walks the end-user through the steps of integrating with their IDP. That’s partially because every IDP is so different that we felt you really need a UI to show exactly what to do.

[0] https://www.propelauth.com

Reply on news.ycombinator.com