---
source_url: "https://www.ory.com/polis?utm_source=openai"
title: "Identity Federation & SAML-to-OIDC Bridge | Ory Polis"
mirrored_at: 2026-08-06T01:10:46.978Z
host: www.ory.com
cited_in_42a: true
mirror_canonical: "https://index.42a.ai/www.ory.com/polis__q__utm_source_openai"
---

> **Original source:** https://www.ory.com/polis?utm_source=openai

The identity federation engine that bridges legacy SAML to modern OIDC and adds SCIM directory sync — so your B2B and B2B2C SaaS app speaks one protocol while accepting every enterprise IdP. Federate with any SAML 2.0 provider through a single API.

_Identity federation_ is the protocol layer behind Enterprise SSO — and it's typically where B2B SaaS engineering teams _lose months_ to SAML edge cases. _Ory Polis_ handles the federation problem _in days, not months_.

### Need support?

Ory Polis is available via Ory Enterprise License: self-hosted control + 24x7 support.

### Need to move quickly?

Get the power of Ory Polis fast and easily via the Ory Network. Sign up for free!

## Identity federation for B2B SaaS apps

Ory Polis handles the protocol layer behind every Enterprise SSO integration — SAML, OIDC, and SCIM — so your engineering team ships the federation features your enterprise customers contractually require without becoming SAML experts.

Seamless Enterprise SSO integration with the customer's existing infrastructure, and minimal effort from the customer side, was very important for us.

[Read the Effortless Solutions' identity federation case study](https://www.ory.com/case-studies/effortless-solutions)

-   ### Multi-tenant organizations
    
    Group customer organizations within your B2B SaaS, manage their federation connections independently, and enforce domain-based authentication that routes users to their organization's IdP.
    
-   ### OIDC single sign-on
    
    Establish OpenID Connect (OIDC) federation connections per organization, configurable through Ory Console or API. Polis's OIDC federation is the same protocol your existing OAuth-based auth stack already speaks.
    
-   ### SAML identity provider support
    
    Federate with every major SAML-based identity provider — Microsoft Entra ID, Microsoft ADFS, Okta, Auth0, Google Workspace, Ping Identity, JumpCloud, and any SAML 2.0–compliant IdP. Polis handles the protocol differences so your app never has to.
    
-   ### SAML to OIDC bridge
    
    The SAML-to-OIDC bridge is Polis's structural differentiator — cross-protocol identity federation that translates legacy SAML into modern OIDC tokens. Your app uses one protocol (OIDC) while accepting connections from every enterprise IdP, regardless of what protocol they speak.
    
-   ### Identity provider discovery and routing
    
    Route users to their organization's federation IdP automatically based on email domain. Eliminates the 'choose your SSO provider' selection step that adds friction at the login UX layer.
    
-   ### Flexible federation deployment
    
    Deploy Polis where your data residency, compliance, or sovereignty requirements take you — self-hosted, private cloud, on-premises, air-gapped, or fully-managed on Ory Network. The deployment flexibility no SaaS-only federation vendor offers.
    

## How to de-risk identity at scale with Ory

OSS is where most teams start. The question is whether it holds up as scale, compliance, and security requirements grow. Running identity infrastructure yourself means owning everything, from patches to incident response, compliance controls, and performance tuning. At enterprise scale, that overhead competes with product innovation. Ory's commercial offerings, OEL and Ory Network, trade that burden for SLA-backed support, managed CVE patching, and audit-ready controls.

OSS

Evaluate and prototype

OEL

Self-hosted, great for enterprises that require air-gapped or certified environments

Ory Network

Fully-managed, fastest path to production without operational overhead

OSS: No

Compliance-ready

Ory Network: Yes

OSS: No

Multi-region capable

Ory Network: Yes

OSS: No

OEL: Yes

Ory Network: Yes

OSS: No

OEL: Yes

Ory Network: Yes

OSS: No

OEL: Yes

Ory Network: Yes

CLI

CLI & GUI

CLI & GUI

OSS: No

OEL: Yes

n/a

OSS: No

n/a

Ory Network: Yes

OSS: No

OEL: Yes

Ory Network: Yes

OSS: No

OEL: Yes

Ory Network: Yes

OSS: No

OEL: Yes

Ory Network: Yes

OSS: No

OEL: Yes

Ory Network: Yes

## Deploy Ory _Polis_ on your preferred infrastructure

Deploy on any infrastructure and take full control over your organizational and enterprise customer SSO.

AuthProvider.tsx

```
...
  const signIn = async () => {
    // store the from url before redirecting ... we need this to correctly initialize the oauthClient after getting redirected back from SSO Provider.
    localStorage.setItem(APP_FROM_URL, from);
    // Initiate the login flow
    await authClient?.fetchAuthorizationCode({
      tenant,
      product,
    });
  };

  const signOut = async (callback: VoidFunction) => {
    authClient?.reset();
    setUser(null);
    callback();
  };
```

![](https://cdn.sanity.io/images/33xluxe1/production/098c90a547632746c4c0aea6c60693a6e57272ba-1540x1232.png?w=1536&h=1229&auto=format&fit=min&q=75)