SHSelfHostIndex
SA

SAML Jackson

SAML and OIDC SSO service bridging enterprise providers

Identity & SSO ★ 2.3k stars Medium setup Apache-2.0

BoxyHQ Jackson (SAML Jackson) is a self-hosted service that abstracts SAML and OIDC enterprise single sign-on behind a simple OAuth 2.0 API. It lets apps add enterprise SSO without per-provider code.

Official siteSource code

Key features

  • SAML and OIDC abstraction
  • OAuth 2.0 API
  • Directory sync (SCIM)
  • Self-hostable

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Active community (2.3k GitHub stars)
  • Written in TypeScript

Is SAML Jackson secure?

No known vulnerabilities affect SAML Jackson's latest release (v26.2.0). OSV.dev lists 1 past advisory for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-33506, published 2026-03-26 (202 days ago), fixed in 26.2.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

SAML Jackson replaces

Self-hosted Auth0 alternativesSelf-hosted WorkOS alternatives

Health badge

Maintain SAML Jackson? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 82 · excellent

Markdown
[![SelfHostIndex health score for SAML Jackson](https://selfhostindex.com/badge/jackson-boxyhq.svg)](https://selfhostindex.com/app/jackson-boxyhq/)
HTML
<a href="https://selfhostindex.com/app/jackson-boxyhq/"><img src="https://selfhostindex.com/badge/jackson-boxyhq.svg" alt="SelfHostIndex health score for SAML Jackson"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/jackson-boxyhq.svg
   :alt: SelfHostIndex health score for SAML Jackson
   :target: https://selfhostindex.com/app/jackson-boxyhq/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare SAML Jackson

18 head-to-head comparisons.

Similar identity & sso apps