Documentation | Gateway



Many applications provide a way to enable login from one of several social identity providers (Google, Microsoft, Facebook, LinkedIn, or others). The limitation is these solutions tend to only work with a single application. End users rarely use a single application in an organization. The Cirrus Gateway is a general purpose solution that allows any of a number of social providers to be integrated with any organization application or hosted service that supports the SAML v2.0 authentication protocol. When the Gateway is used in conjunction with the Cirrus Identity Provider Proxy, customers have a central point to manage social login for a suite of applications or services, more protocol options, and additional proxy capabilities.
Social login and enterprise SSO to the same application. Diagram shows users on the left logging in with enterprise accounts via enterprise IdP and social login via the Cirrus gateway to applications represented on the right of the diagram.
Customers only need to establish integrations (in the form of API keys) with each social provider, No other maintenance required. Cirrus Identity maintains the Gateway as a hosted solution and deploys changes as each social providers tweak things. There is nothing customers run onsite. We’re on top of the integration details so you can forget about them.

The Cirrus Gateway currently supports the following social providers:

Provider Protocol Documentation Notes
Google OpenID Connect App Console
Policy Statement
Facebook OpenID Connect App Console
Policy Statement
Microsoft OpenID Connect App Console
Policy Statement
This includes Outlook, Hotmail, and Windows Live accounts
LinkedIn OpenID Connect App Console
Policy Statement
Yahoo! OpenID 2 OpenID Info Cirrus Identity does not recommend Yahoo for new service providers. Yahoo is no longer supporting their OpenID V2 login method and Cirrus Identity does not consider the Yahoo OpenID Connect implementation a viable option for customers.
Twitter OAuth1 App Console
Policy Statement
Weibo OAuth2 App Console
Policy Statement
Instagram Facebook has announced they will be phasing out separate Instagram APIs. Cirrus Identity is not recommending the use of Instagram login for new customers and will be phasing out our offering by 2020.
Cirrus Identity continually evaluates the social login offerings based on social provider API support, customer needs, and changes in end user utilization of different social login platforms.