SAML Manager

SAML Manager is a tool to help manage your SAML deployments

Get Started

People collaborating around a large screen displaying data and charts

Security You Can Verify

Your credentials are treated like the crown jewels they are — protected at every step from your browser to long-term storage.

Encrypted at Submission

Credentials are encrypted in your browser via CloudFront Field-Level Encryption before they ever reach our servers. No plaintext ever enters our logs.

Double-Encrypted at Rest

Credentials are stored in AWS Secrets Manager and wrapped a second time with a dedicated AWS KMS Customer Master Key — two independent layers of encryption at rest.

Bring Your Own Key (BYOK)

Every organization gets a dedicated KMS key we provision automatically. Regulated customers can supply their own KMS key — revoke it and your credentials become unreadable, even to us.

No AI, No Agents, No Exceptions

Your credentials are never fed to LLMs, AI assistants, or autonomous agents. Decryption is scoped exclusively to the provisioning function that needs it — nothing else.

Learn how we protect your credentials