Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 8 Complete, well-documented, and agent-ready

Shopify Multipass APIMultipass login is for store owners who have a separate website and a Shopify store, enabling seamless sing...90.2 MX SSO APIA RESTful authentication API used to authenticate users on the MX Platform and generate widget URLs for Per...75.6 Cvent Single Sign-On (SSO) IntegrationCvent SSO enables identity provider integration via SAML and OpenID Connect for planner login, access porta...75.2 Treasure Data SSO APIIdentity federation and SSO settings74.3 Remote SSO APIConfigure SAML/OIDC single sign-on for a company72.6 Postman SCIM APIThe SCIM 2.0 API enables Enterprise customers to provision and deprovision users and groups from their iden...72.5 Palo Alto Networks SSO APIOn Prisma Cloud, you can enable single sign-on (SSO) using an Identity Provider (IdP) that supports Securit...71.1 BigPanda SSO & JIT Provisioning APISAML SSO configuration, a SAML debug endpoint, and just-in-time domain and role provisioning.70.3

Strong 16 Solid coverage with minor gaps

DS Core APIDS Core is the open cloud platform from Dentsply Sirona that connects dental practices, laboratories, and D...65.6 TU Delft SAML 2.0 Identity Provider (NetID)TU Delft's SimpleSAMLphp identity provider — the machine-readable half of NetID. It publishes a signed SAML...65.2 Koyeb sso APIThe sso API from Koyeb — 2 operation(s) for sso.64.2 Valimail SSO APIThe SSO API from Valimail — 1 operation(s) for sso.62.0 Moogsoft User Management APIAPI for User Service61.2 Auth0 SSO APIThe SSO API from Auth0 — 1 operation(s) for sso.60.8 U-M Shibboleth Identity Provider (InCommon)The University of Michigan's own Shibboleth SAML 2.0 identity provider, and the most unambiguously institut...59.2 University of Twente SAML 2.0 Identity Provider (SURFconext)The university's own SAML 2.0 identity provider, entityID https://sts.windows.net/723246a1-c3f5-43c5-acdc-4...59.1 Stytch SSO APIThe SSO API from Stytch — 12 operation(s) for sso.58.2 Super.ai sso APISingle Sign-On operations for configuring SAML-based SSO authentication.58.0 ALTR SSO APIOperations related to Single Sign-On56.9 UC San Diego API Gateway (WSO2 API Manager)The campus API gateway, running WSO2 API Manager 4.1.0 at api.ucsd.edu on UC San Diego address space (169.2...56.9 UC San Diego Web API Portal (Atlassian Confluence Cloud tenant)The campus Web API Portal and REST API guidelines. TENANT, not institution-engineered — https://collab.ucsd...56.9 Fat Zebra SSO APIPartner SSO enforcement — read state, enforce, disable.55.7 Raven Authentication (OAuth2 / OpenID Connect)The University's central web authentication service. Raven OAuth2 conforms to OpenID Connect; applications ...55.2 NordLayer SCIM 2.0 ProvisioningSCIM-based user provisioning surface used to create users, update user attributes, deactivate users and pus...54.7

Developing 44 Usable, with meaningful gaps to close

Crusoe SSO APIThe SSO API from Crusoe — 3 operation(s) for sso.53.6 Zoom SCIM2 APIThe Zoom SCIM2 API automates user and group identity provisioning across cloud applications using SSO servi...53.3 Authelia APIThe full first-party Authelia HTTP API — the portal, authorization, authentication, second factor, user inf...52.8 WorkOS sso APISingle Sign-On endpoints.52.6 Lone Wolf Technologies SSO APIThe Sso API from Lone Wolf Technologies — 2 operation(s) for sso.51.4 Shibboleth SAML Identity Provider (UK Access Management Federation)The University's own Shibboleth Identity Provider, entityID https://shib.manchester.ac.uk/shibboleth, asser...50.4 Openwork SSO APIOrganization single sign-on connector management routes.49.9 BLNG User APIREST API that manages BLNG users, roles and permissions, workspaces and workspace members, workspace and su...49.1 Getty Images SCIM APIGetty Images serves a SCIM 2.0 (RFC 7643 / RFC 7644) user-provisioning surface at https://scim.gettyimages....49.1 Picarro Identity (P-Cubed SSO)The Keycloak-backed identity service that fronts the Picarro P-Cubed cloud platform. It publishes an anonym...49.1 Dokploy sso APIThe sso API from Dokploy — 10 operation(s) for sso.48.9 Retool SCIM 2.0 APIRetool implements a subset of the SCIM 2.0 API for automated user provisioning and group mapping through id...47.9 Perforce Helix Authentication Service APIREST API for the Helix Authentication Service, a Node.js based authentication protocol integration service ...47.6 Utrecht University SAML 2.0 Identity Provider MetadataSigned SAML 2.0 EntityDescriptor for Utrecht University's identity provider, served as XML at a stable URL ...47.4 Kaltura sso APIThe sso API from Kaltura — 6 operation(s) for sso.47.3 Rice Shibboleth SAML 2.0 Identity ProviderRice University's own Shibboleth/SAML 2.0 identity provider, publishing a live EntityDescriptor with an IDP...46.9 Epic Account Services APIEpic Account Services (EAS) provides authentication and identity for players using Epic Games accounts. Sup...46.8 UGM ID — OAuth 2.0 / OpenID Connect Authorization ServerUniversitas Gadjah Mada's own identity API, operated by the Directorate of Information Technology (DTI) at ...46.6 UGM Shibboleth SAML 2.0 Identity ProviderUGM's own Shibboleth Identity Provider, entityID https://sso.ugm.ac.id/idp/shibboleth, publishing an unsign...46.6 UGM Single Sign-On (CAS)Central Authentication Service at sso.ugm.ac.id/cas, the login surface UGM systems redirect users to. A bar...46.6 AMCS Group Sso APIThe Sso API from AMCS Group — 2 operation(s) for sso.45.2 McGill University Authentication Service — Shibboleth SAML 2.0 Identity ProviderMcGill's SAML 2.0 identity provider and the only machine-readable surface in this profile that McGill itsel...45.1 Columbia Identity — Shibboleth IdP and CASColumbia University Information Technology operates the university's own identity infrastructure: a product...44.7 Tessell SSO APIThe SSO API from Tessell — 1 operation(s) for sso.44.3 Opply SSO APIThe SSO API from Opply — 1 operation(s) for sso.43.9 jAccount Authorization Server (OAuth 2.0 / OpenID Connect)SJTU's own identity and single sign-on system, run by the Network and Information Center on the university'...43.8 Kyoto University Shibboleth Identity Provider (GakuNin)Kyoto University operates its own Shibboleth SAML 2.0 identity provider, run by the Institute for Informati...43.8 Looker Embed SDKThe Looker Embed SDK is a JavaScript library for embedding Looker content such as dashboards, Looks, Explor...43.7 Emory Identity (Shibboleth / SAML)Emory operates a federated Shibboleth identity provider for SAML-based single sign-on across institutional ...43.3 DFN-AAI Identity Federation — KIT Shibboleth Identity ProviderThe Scientific Computing Center operates KIT's Shibboleth SAML 2.0 Identity Provider and publishes its meta...43.0 KIT OpenID Connect Provider (SCC Keycloak realm)Separately from the Shibboleth IdP, the Scientific Computing Center operates a Keycloak OpenID Connect prov...43.0 Oper Credits Sso APIThe Sso API from Oper Credits — 2 operation(s) for sso.42.9 Politecnico di Milano Shibboleth Identity ProviderThe university's own Shibboleth identity provider, publishing its SAML 2.0 EntityDescriptor at https://shib...42.9 Citrix Workspace APIIntegrate and customize Citrix Workspace for end users.42.7 Supabase SSO APISAML-based single sign-on endpoints.42.5 CMU Web Login (Shibboleth SAML 2.0 Identity Provider)Carnegie Mellon's campus-wide single sign-on identity provider, running Shibboleth on CMU's own host and ad...42.4 NYCU OAuth APIThe university's own OAuth 2.0 (RFC 6749) authorization server, fronting the NYCU single sign-on account. O...42.4 Nav Partner APIREST API for Nav partner integrations. Partners authenticate with a Bearer token API key issued during onbo...41.7 EVE Single Sign-On (SSO)EVE Single Sign-On (SSO) is the OAuth 2.0 authorization service for EVE Online third-party applications, ho...41.2 Shibboleth SAML Identity Provider (UK Access Management Federation)The University's own Shibboleth 3.x Identity Provider, entityID https://webauth.soton.ac.uk/shibboleth, ass...40.8 MSU Identity Provider (Shibboleth / SAML 2.0)MSU's federated single sign-on. The Shibboleth Identity Provider publishes SAML 2.0 metadata unauthenticate...39.9 Pitt Passport (Shibboleth SAML 2.0 Identity Provider)The University of Pittsburgh's campus-wide single sign-on identity provider. Its SAML 2.0 metadata is publi...39.8 University SSO — OpenID Connect Discovery (Okta tenancy)TENANT RELATIONSHIP. sso.unimelb.edu.au is an Okta Identity Cloud tenancy running under a University vanity...39.6 SCIM Users APIManage users in the Workday Strategic Sourcing platform using the SCIM 2.0 standard, enabling integration w...39.4

Thin 52 Limited public surface area

GakuNin Shibboleth Identity Provider (SAML 2.0)Shibboleth / SAML 2.0 Identity Provider for institutional single sign-on, registered in GakuNin, Japan's na...38.7 CloudHealth SSO APISingle sign-on configuration.38.2 vLex Remote Authentication APISingle sign-on authentication API for corporate vLex accounts. Generates redirect URLs using HMAC authentic...38.1 Xoxoday Storefront Integration APIAPI for embedding a white-labeled reward storefront into existing applications via SSO/SAML. Enables end-us...37.8 CyberArk Identity REST APIThe CyberArk Identity REST API enables programmatic management of users, roles, applications, MFA policies,...37.7 USTC Unified Identity Authentication (id.ustc.edu.cn, formerly Passport SSO)USTC's institution-operated authorization server, run by the Network Information Center and the hub every o...37.6 Edlink SSO APIOAuth 2.0 and OpenID Connect single sign-on.37.4 Accredible SSO APIRecipient single sign-on link generation.37.3 Imperial Shibboleth Identity Provider (SAML 2.0)Imperial's own Shibboleth IdP, and the one unambiguously institution-operated machine-readable contract it ...37.3 Oper Sso APIThe Sso API from Oper — 2 operation(s) for sso.37.0 King's UK Access Management Federation / eduGAIN Identity ProviderKing's federated identity, and the surface class this pipeline flags as most often missed. The entity is re...36.8 Kingo Portal (campus SSO and gated student systems)Kingo Portal is SKKU's single sign-on environment, the front door to the university's own online services —...36.8 TU Dresden Identity Provider (Shibboleth SAML 2.0 + OpenID Connect)The university's own Shibboleth identity provider, operated by ZIH, and the surface class this pipeline exi...36.8 ClassLink OAuth2 / SSO APIOAuth 2.0 authorization code flow enabling third-party applications to authenticate users via ClassLink Lau...36.5 Rippling SSO APIConfigure SAML/OIDC single sign-on between Rippling as an IdP and external service providers, plus SP integ...35.9 Earthdata Login APIThe Earthdata Login API provides free and immediate access to thousands of EOSDIS data products covering al...35.7 Alianza SSO APIThe SSO API from Alianza — 1 operation(s) for sso.35.6 Pricefinder SSO APIThe sso API from Pricefinder — 9 operation(s) for sso.35.3 LSE Shibboleth Identity Provider (UK Access Management Federation)LSE operates its own SAML2 Shibboleth identity provider for staff, students and library resource access, re...35.1 OpenWeb Publisher APIJWT-authenticated REST API for publishers on the OpenWeb platform: request an API token, export comments/us...34.8 fly-io SSO APISingle sign-on operations allowing Fly.io users to access provider dashboards using their Fly.io credential...34.7 USM Shibboleth Identity Provider (SIFULAN / eduGAIN)USM's own SAML 2.0 Shibboleth identity provider, entityID https://shibsso.usm.my/idp/shibboleth, scope usm....34.5 Leiden University SAML 2.0 Identity Provider MetadataLeiden University's own SAML 2.0 identity-provider metadata document, authored and XML-DSig signed by Leide...33.9 VATSIM Connect APIOAuth 2.0 single sign-on authentication service for VATSIM members. Enables third-party applications and VA...33.7 Western Single Sign-On (Apereo CAS — CAS 3.0, SAML2, OIDC)Western Technology Services operates an Apereo CAS server at ssocas.uwo.ca. The CAS 3.0 protocol is publicl...33.3 TU Darmstadt Shibboleth Identity Provider (SAML 2.0 metadata)The university's own SAML 2.0 identity provider, operated by the Hochschulrechenzentrum (HRZ). Verified liv...32.9 Nanjing University Unified Identity Authentication (CAS SSO)NJU's central single sign-on, a CAS deployment supporting password, verification-code, biometric and QR-cod...32.6 University of Exeter Microsoft Entra ID TenantExeter runs a Microsoft Entra ID tenant (912a5d77-fb98-4eee-af32-1334d8f04a53) used for staff and student s...32.5 University of Exeter Shibboleth Identity ProviderExeter operates its own SAML 2.0 Shibboleth identity provider with entityID https://elibrary.exeter.ac.uk/i...32.5 Loom SSO (SAML) ConfigurationSAML 2.0 single sign-on configuration for Enterprise workspaces. Configurable per workspace from the admin ...32.4 Waseda Identity Provider (Shibboleth SAML 2.0)Waseda operates its own Shibboleth SAML 2.0 identity provider. The metadata document is served anonymously ...32.4 Windsurf Enterprise (Codeium for Enterprise)Self-hosted / managed enterprise SKU with admin dashboards, analytics, RBAC, and SSO.32.4 ASU Shibboleth SAML 2.0 Identity ProviderASU's own Shibboleth Identity Provider, entityID urn:mace:incommon:asu.edu, asserting the scope asu.edu. AS...31.8 ASU WebAuth (CAS single sign-on)ASU operates an enterprise single sign-on service using the Central Authentication Service (CAS) protocol f...31.8 UOW Shibboleth Identity Provider (SAML 2.0 metadata)The University of Wollongong's own SAML 2.0 Identity Provider. Its EntityDescriptor is served publicly and ...30.9 ITB Single Sign-On (CAS)ITB's campus-wide single sign-on, built on the Apereo CAS (Central Authentication Service) protocol and run...30.3 VU Amsterdam SAML 2.0 identity provider (SURFconext / eduGAIN)Vrije Universiteit Amsterdam operates its own SAML 2.0 identity provider on Microsoft ADFS and publishes si...30.1 Feide / Dataporten Identity Federation (NTNU membership)NTNU authenticates through Feide, the Norwegian national identity federation operated by Sikt, with Datapor...29.9 Flowdock SCIM Provisioning APIPartial SCIM 1.x user provisioning API for CA Flowdock Enterprise customers with Single Sign-On configured....29.6 Memberful OAuth SSO APIOAuth 2.0 Authorization Code flow (with PKCE) for signing members into external apps. Authorize at /oauth, ...29.4 Canvas LMS TenancyOhio State's Canvas learning management system tenancy, branded Carmen. Canvas exposes an LTI-capable REST ...28.9 Web Single Sign-On (Shibboleth Identity Provider)Institution-wide web authentication and authorization operated by the Office of Technology and Digital Inno...28.9 Microsoft Entra ID Tenant — OpenID Connect DiscoveryQueen Mary's Microsoft Entra ID tenant, GUID 569df091-b013-40e3-86ee-bd9cb9e25814, EU region scope. The Ope...28.8 Shibboleth SAML Identity Provider (UK Access Management Federation)Queen Mary's own Shibboleth Identity Provider, entityID https://idp.shibboleth.qmul.ac.uk/idp/shibboleth, a...28.8 SAML SSO APISAML 2.0 Single Sign-On operations.28.2 AUB Shibboleth Identity Provider (SAML 2.0)AUB's own Shibboleth SAML 2.0 identity provider, the front door to campus single sign-on. The metadata endp...28.0 Microsoft Entra ID tenant (institutional identity)The University's Microsoft Entra ID tenant, 8c2b19ad-5f9c-49d4-9077-3ec3cfc52b3f, resolvable from the abdn....27.3 Shibboleth SAML Identity Provider (UK Access Management Federation)The University's own Shibboleth Identity Provider, entityID https://shibserv.abdn.ac.uk/shibboleth, asserti...27.3 UPM Shibboleth SAML 2.0 Identity ProviderUPM's own Shibboleth identity provider, publishing conforming SAML 2.0 and SAML 1.1 metadata at its entityI...26.9 IIT Delhi OAuth 2 Authentication ServerIIT Delhi operates an OAuth 2 authorization server that lets developers register their own campus apps and ...26.8 Keycloak Admin REST APIAdministration REST API for Keycloak identity and access management, supporting OAuth2, OpenID Connect, and...26.7 KAU SAML 2.0 Identity ProviderKing Abdulaziz University's institutional SAML 2.0 identity provider, running Oracle Access Manager Federat...26.4

Emerging 12 Early or largely undocumented

WebsitePros SSO APIGenerate a single-sign-on URL for a customer owned by your tenant.25.8 SSO UI (CAS Single Sign-On)Sistem Akun UI, the university-wide Single Sign-On, implemented with the Apereo CAS protocol at sso.ui.ac.i...25.5 UB Centralized SSO (Identificació UB, SAML 2.0 / CAS)Universitat de Barcelona centralized single sign-on providing federated authentication for university web a...24.4 Wand Identity (OpenID Connect)Wand runs Keycloak at auth.wand.ai as the identity provider for its platform. The master realm serves an an...21.2 Casdoor CAS ServerCasdoor exposes a CAS (Central Authentication Service) server compatible with CAS protocol versions 1.0, 2....20.8 Casdoor OAuth 2.0 / OIDC ProviderCasdoor implements an OAuth 2.0 authorization server and OpenID Connect identity provider, exposing the sta...20.8 Casdoor SAML 2.0 Identity ProviderSAML 2.0 identity provider endpoints in Casdoor that issue SAML assertions to enterprise service providers,...20.8 Johrh SSO APIThe SSO API from Johrh — 3 operation(s) for sso.18.9 TeamViewer SCIM APISCIM 2.0 API for automated user provisioning, deprovisioning, and lifecycle management within a TeamViewer ...17.2 Tabnine Enterprise (Admin Suite + Context Engine)Enterprise SKU with admin console (data analytics, model provisioning, context permissions, SSO), Enterpris...14.5 LastPass SAML / SSO EndpointLastPass acts as either a SAML identity provider (IdP) for the cloud apps catalogued in the LastPass App Li...13.4 Codeium for Enterprise (Windsurf Enterprise)Enterprise / self-hosted SKU with admin dashboards, RBAC, analytics, and SSO. Sold as Windsurf Enterprise; ...12.4

Companies reaching this through an API (109)

These companies publish an API, specification or operation carrying “SSO” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Accredible Alianza ALTR AMCS Group American University of Beirut Arizona State University Auth0 Bandung Institute of Technology BigPanda Blng Carnegie Mellon University Citrix CloudHealth Codeium Columbia University Crusoe Delft University of Technology Dentsply Sirona Dokploy Edlink Emory University Epic Games Fat Zebra Flowdock (Discontinued) Fly Io Gadjah Mada University Getty Images Imperial College London Indian Institute of Technology Delhi JBoss Johrh Kaltura Karlsruhe Institute of Technology King Abdulaziz University King's College London Koyeb Kyoto University Leiden University London School of Economics and Political Science Lone Wolf Technologies Looker Loom McGill University Memberful Michigan State University Moogsoft MX Technologies Nanjing University NASA Earthdata National Yang Ming Chiao Tung University

Show all 109 companies ↓

Nav Nord Security Norwegian University of Science and Technology Ohio State University Oper Oper Credits Opply Palo Alto Networks Perforce Picarro Politecnico di Milano Pricefinder Queen Mary University of London Remote Retool Rice University Rippling Scout RFP Shanghai Jiao Tong University Shopify Stytch Sungkyunkwan University Supabase Super.ai Tabnine TeamViewer Technical University of Darmstadt Tessell Tokyo Institute of Technology Treasure Data TU Dresden Universiti Putra Malaysia Universiti Sains Malaysia University of Aberdeen University of Barcelona University of California, San Diego University of Cambridge University of Exeter University of Indonesia University of Manchester University of Melbourne University of Michigan-Ann Arbor University of Pittsburgh University of Science and Technology of China University of Southampton University of Twente University of Wollongong Utrecht University Valimail VATSIM vLex Vrije Universiteit Amsterdam Wand Waseda University WebsitePros Western University Windsurf Xoxoday Zoom

Score breakdown

Frequency

63.0

log-scaled weighted occurrences

Breadth

1.0

spread across providers

Quality lift

44.7

mean composite of providers using it

Cohesion

20.8

strength of nearest seed neighbor

Where this tag comes from

Api tag132

Provider tag38

Openapi tag31

Openapi op tag111

Cohort brief

Auto-generated

The 38 providers in the APIs.io catalog tagged SSO, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers

all scored

Mean Kin Score

39.4

+15.5 vs catalog 23.9

Mean Agent Readiness

22.5

+10.5 vs catalog 12

Spread

6.3–75.2

median 38.7 · σ 17.8

How the 38 split by band

Exemplar 3Strong 5Developing 11Thin 10Emerging 7Minimal 2

Facet averages, against the whole catalog

Facet	This cohort	Catalog	Difference	Scored
Contract Quality	42.6	19.8	+22.8	38
Operational Transparency	31.4	13.9	+17.5	38
Developer Ergonomics	34.9	23.4	+11.5	38
Access Clarity	37.9	26.5	+11.4	38
Contract Governance	16.2	6.4	+9.8	38
Discoverability	66.9	61.2	+5.7	38

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes

Artifact	This cohort	Catalog	Difference
MCP server (any)	11%	10%	+1
MCP server (first-party)	21%	13%	+8
Agent Skills	0%	0%	0
OAuth scopes	29%	11%	+18
Security	97%	96%	+1
Arazzo workflows	8%	2%	+6
Governance rules	42%	14%	+28

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score

1 Cvent 75.2
2 Postman 72.5
3 Frontegg 67.5
4 Clerk 65.8
5 PropelAuth 64.4
6 Descope 56.4
7 Login.gov 54.8
8 Doximity 54.6
9 Authelia 52.8
10 WorkOS 52.6

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this

find_tagsBrowse and filter every tag in the catalog.
get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This tag

curl "https://apis.io/api/v1/tags/sso"

All tags

curl "https://apis.io/api/v1/tags?limit=25"

As a scored cohort

curl "https://apis.io/api/v1/cohorts/tag/sso"

The distribution (Pro)

curl "https://apis.io/api/v1/cohorts/tag/sso/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

SSO

Providers using this tag (38)

APIs with this tag (132)