Detect SimpleSAMLphp

Authentication

SimpleSAMLphp is an open-source PHP authentication application that provides support for SAML 2.0 as a Service Provider (SP) or Identity Provider (IdP).

Detection looks at cookies across 2 fingerprint rules among the site's public responses.

01

Websites using SimpleSAMLphp

Loading website list…

02

Signal classes

PluginView evaluates public page signals in these classes when identifying SimpleSAMLphp. Individual fingerprint rule bodies are proprietary and are not published.

  • Cookies
03

Example public indicators for SimpleSAMLphp

Illustrative indicators derived from public catalog metadata for SimpleSAMLphp. A live scan may match additional proprietary rules beyond these examples.

  • SimpleSAML
  • SimpleSAMLSessionID
04

What a detection means

Establishes
One or more public signals on the scanned page matched a known SimpleSAMLphp signature (2 rules) at the time of the scan.
Does not establish
A sitewide install of SimpleSAMLphp, an active vendor contract, exclusive use, or that SimpleSAMLphp is still in place today.
05

How to check a site for SimpleSAMLphp

  1. 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest SimpleSAMLphp signals.
  2. 2. PluginView reads only public responses (cookies) and scores them against the SimpleSAMLphp signature set (2 rules).
  3. 3. Review the confidence score and text explanation for SimpleSAMLphp on the results page.
06

Commonly implies

A confirmed SimpleSAMLphp match also implies these technologies are present.

07

FAQ: detecting SimpleSAMLphp

Can PluginView detect SimpleSAMLphp without logging in?
Yes. PluginView only reads publicly accessible responses when checking for SimpleSAMLphp — typically cookies. It does not bypass authentication or paywalls.
What category is SimpleSAMLphp?
SimpleSAMLphp is classified under Authentication in the PluginView directory.
How many fingerprint rules cover SimpleSAMLphp?
This reference currently tracks 2 fingerprint rules across cookies. Individual rule bodies are proprietary and are not published.
What public signals suggest a site uses SimpleSAMLphp?
Illustrative public indicators for SimpleSAMLphp include SimpleSAML; SimpleSAMLSessionID. A live scan may match additional proprietary rules beyond these examples.

More in Authentication

View category →