Sold by: miniOrange
Deployed on AWS
AWS Free Tier
Build a strong defence around all your on-premise applications. The miniOrange Identity and Access Management (IAM) platform, with Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions, helps secure user account access for on-prem infrastructure.
4.6
Overview
miniOrange Identity and Access Management (IAM) platform offers a comprehensive suite of products such as Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions, which are developed for identity management, access control, and layered defences, to scale your businesses, and to easily secure workforce identity, including employees, partners, and clients.
Our on-premise IAM solution adheres to a range of regulatory compliances, such as GDPR, PCI DSS, and more. It is developed to withstand malicious cyber threats and unauthorized account access through strong granular policy frameworks.
Use miniOrange on-premise IAM with AWS Integrations, along with AWS IAM, AWS Organizations, AWS SSO, AWS Session Tags, and Amazon Control Tower.
On-Premise IAM Solution includes:
- Single Sign-On (SSO): Enable secure and effortless access to on-premise resources and 5000+ applications with just a single set of credentials with role-based access.
- Multi-Factor Authentication (MFA) & Passwordless Access MFA solution adds an extra layer of security and also enforces passwordless access via authentication methods, like OTP, TOTP, biometrics, push notifications, and hardware tokens.
- Identity Brokering & Federated Authentication Authenticate users from third-party Identity Providers (IDPs), like Entra ID, Active Directory (AD), or Google, for better on-prem access via a Single Sign-On solution.
- User Lifecycle Management & Provisioning Maximize productivity and manage workforce and customer identities with automated SCIM-based user provisioning and deprovisioning.
Highlights
- Unified Identity Platform: miniOrange Single Sign-On solution delivers security and the speed you need to manage your users access to your applications and data all in one place.
- Focused Advanced Security: Our on-premise identity management provides critical low latency and reliability for performance-sensitive advanced security, enabling immediate threat response and superior control.
- Customized Products: Tailor IAM products like SSO and MFA solutions for better integration with operational workflows, delivering a customized identity management solution for your security posture.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
AmazonLinux Amazon Linux 3
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
30 Day Free Trial
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
miniOrange IDP 5.2.2 - Getting Started
All components (PostgreSQL, Redis, RabbitMQ, Nginx, Java 17, IDP microservices) are pre-installed and start on boot. You only complete a one-time setup wizard.
Instance: x86_64 only (no ARM/Graviton). Minimum 4 vCPU / 16 GB RAM / 50 GB gp3 (e.g. t3.xlarge); 8 vCPU / 32 GB recommended.
1. Security Group
Inbound: TCP 443 from your users; TCP 22 from your admin IP only. Outbound: allow HTTPS 443 (email, identity sources, licensing). The appliance serves HTTPS only; there is no port 80 listener.
2. Launch
Launch from AWS Marketplace, selecting an EC2 key pair. Wait for Running plus 2/2 status checks (first boot 3-5 min), then note the Public IPv4 address.
3. Retrieve Credentials
Note MO_DB_PASS (PostgreSQL) and MO_MQ_PASS (RabbitMQ).
4. Setup Wizard
Open https://<instance-ip> and accept the self-signed certificate warning. Enter these connection details when prompted:
- PostgreSQL: Host localhost, Port 5432, Database miniorange, Username postgres, Password = MO_DB_PASS, SSL disabled.
- Redis: Host localhost, Port 6379, no password, SSL disabled.
- RabbitMQ: Host localhost, Port 5672, Virtual host /, Username admin, Password = MO_MQ_PASS, SSL disabled.
The wizard validates the connections, initializes the database, and prompts you to create your administrator account. Complete all steps and save.
5. Restart Services After Database Initialization (REQUIRED)
Once the wizard has initialized the database, restart all services one time so every microservice picks up the new configuration and schema. Until you do this, some services stay in a "setup pending" state and the console may not load fully.
sudo moctl service restartWait 2-3 minutes, then reload the application in your browser.
6. Verify
Core services configserver, eurekaserver, gatekeeper and miniorange must be healthy. Sign in at https://<instance-ip> with the administrator account you created.
7. Optional: Custom Domain
- Point a DNS A record at the instance IP.
- Replace /etc/nginx/conf/self-signed.crt and .key with your certificate, then sudo systemctl restart nginx.
- Admin console > gear icon > Settings > Server Base URL > your domain > save.
- sudo moctl service restart.
8. Before Production
Change the default postgres and admin passwords (admin console > infrastructure settings, then sudo moctl service restart), restrict port 22 to your admin network, and install a CA-issued TLS certificate.
Useful commands: moctl service restart [name], moctl log <name> -f, moctl system memory|cpu|disk. Logs: /opt/tomcat/latest/services/logs/
Support
miniOrange support: idpsupport@xecurify.com
Resources
Vendor resources
Support
Vendor support
Get 24*7 technical support from miniOrange seasoned engineers to effectively use IAM products and services. Our support team is available via email and phone to assist with troubleshooting, configuration, and deployment. Email Support: idpsupport@xecurify.com or Call us on +1 978 658 9387 (US) / +91 97178 45846 (India)
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
The miniOrange Cloud IAM helps securely manage user access and permissions across the entire cloud environment. The platform includes Single Sign-On (SSO), Multi-Factor Authentication (MFA), adaptive authentication, passwordless login, SCIM provisioning, and identity federation, all designed to strengthen security, adhere to the zero trust principle, simplify access, and support compliance requirements.
miniOrange's PAM solution ensures robust Privileged Access Management across cloud, on-premises, and hybrid environments. Here’s how it benefits your business: enhances visibility, streamlines deployment, and automated processes, and boosts security, along with risk minimization. It enables companies to securely manage, control, and monitor privileged access anywhere in the digital infrastructure.
miniOrange Identity and Access Management (IAM) solution is built to secure workforce identity and manage B2B access for users, devices, and applications across on-premise infrastructure.
WordPress Cognito Integrator provides integration of Cognito SDKs in WordPress for handling seamless SSO Login, Registration, Profile Update, User Sync, Password Reset of AWS Cognito users from WordPress.
Customer reviews
Stefan P.
Modern SSO for Legacy Apps—No Code Changes Needed
Reviewed on Aug 17, 2026
Review provided by G2
What do you like best about the product?
What impressed us most about miniOrange Access Gateway (MAG) was its ability to add modern authentication and Single Sign-On to our legacy applications without requiring application code changes. We were able to integrate applications that did not support modern identity protocols and provide users with a consistent authentication experience. The deployment was relatively straightforward, and the support team helped us navigate some complex integration requirements.
What do you dislike about the product?
The product offers a wide range of configuration options, which can create a learning curve during the initial setup. Some advanced use cases required additional consultation with the support team. However, once configured, the solution has been stable and easy to manage.
What problems is the product solving and how is that benefiting you?
We had several business-critical legacy applications that could not support SAML, OAuth, or OpenID Connect. Replacing these applications was not practical, and maintaining separate authentication systems created security and operational challenges. miniOrange Access Gateway allowed us to extend Single Sign-On and MFA to these applications, improving security while preserving our existing investments. As a result, we reduced password-related issues, improved compliance, and delivered a better user experience across our application ecosystem.
Daniele T.
miniOrange Enabled Legacy Access Gateway and Unified Federated Identity Across Regions
Reviewed on Jul 10, 2026
Review provided by G2
What do you like best about the product?
We have 7,500 employees across 12 countries, with a mix of cloud services and legacy on-premise systems, multiple regional AD domains, a large contractor population, and compliance requirements spanning ISO 27001, SOX, and GDPR across subsidiaries. A key requirement was an Access Gateway for legacy manufacturing execution systems—some running on infrastructure that’s a decade old and has no native SAML or OIDC support—which ruled out most other vendors. miniOrange met that need without requiring any changes to application code. Federated identity across our European, Asian, and North American AD instances was also handled well, bringing all three into a single, unified identity broker.
What do you dislike about the product?
I was hoping for more native SIEM integration to support real-time identity event streaming. Right now, we have to pull logs on a scheduled basis, which introduces latency and slows down our threat detection workflows. My understanding is that this is on the roadmap.
What problems is the product solving and how is that benefiting you?
Our IAM setup used to be decentralized by region, with each country managing its own access controls, MFA policies, and provisioning independently. A global security audit flagged this as a critical issue. miniOrange provided a centralized control plane without forcing us to replace the regional AD infrastructure that each subsidiary had built over the years. We can now enforce a global MFA policy, a least-privilege standard, and a consistent offboarding process across the organization. Contractor access management is also time-bound and expires automatically at the end of a project, which has removed a significant manual deprovisioning burden. On cost, compared with enterprise IAM alternatives, it came in roughly 40–50% lower for equivalent core functionality.
Gregory Y.
The MFA That worked Well for Remote Teams
Reviewed on Jul 06, 2026
Review provided by G2
What do you like best about the product?
miniOrange has helped us secure access for remote employees across Microsoft 365, our VPNs, and internal applications. The platform supports multiple authentication methods and lets us apply different policies depending on the user and the access requirements. Deployment was straightforward, and our users adjusted to it quickly.
What do you dislike about the product?
The initial setup takes some planning, especially when you’re configuring policies for different applications and user groups. A few of the more advanced settings needed extra testing before I felt comfortable deploying them, but once everything was in place, day-to-day management has been straightforward.
What problems is the product solving and how is that benefiting you?
As more of our employees began working remotely, we needed stronger access controls without turning the login process into something complicated. miniOrange helped us roll out MFA and adaptive authentication across our applications. Since then, account security has improved, we have better visibility into login activity, and we’re able to manage access more effectively overall.
Andy S.
miniOrange SSO: Robust Security, Compliance, and Audit-Ready Authentication Logs
Reviewed on Jul 01, 2026
Review provided by G2
What do you like best about the product?
We operate in the financial services sector, so security and compliance are non-negotiable. The miniOrange SSO solution has been instrumental in helping us meet HIPAA and PCI-DSS compliance requirements. It offers granular control over authentication policies, including risk-based access and conditional access rules. It also logs every authentication event, access change, and policy modification in detail, which is essential for our compliance audits and regulatory examinations.
What do you dislike about the product?
The user interface is functional, but it feels a bit dated compared to more modern SaaS applications. Navigation also takes several clicks for common tasks, which can slow things down. A refreshed UI with stronger UX patterns would streamline the admin experience and make it even better overall.
What problems is the product solving and how is that benefiting you?
miniOrange addressed this by providing centralized identity and access management with complete audit trails. Now, when we terminate an employee, access to all systems is revoked within minutes through automated workflows. Our compliance audit process, which used to take 3–4 weeks, now takes 3–4 days because we have full visibility and clear documentation.
Michael C.
Seamless Oracle EBS SSO Integration with Helpful Support
Reviewed on Jun 24, 2026
Review provided by G2
What do you like best about the product?
The best part of miniOrange is how smoothly it integrated with our Oracle E-Business Suite environment. We were able to enable Single Sign-On using our existing identity provider without needing major changes to Oracle EBS. The setup process was straightforward, and both the documentation and the support team were helpful throughout the implementation. As a result, users now have a seamless login experience, while IT benefits from centralized authentication and stronger security controls.
What do you dislike about the product?
The initial configuration required a solid understanding of Oracle EBS authentication flows, which could be challenging for teams without prior IAM experience. That said, the support team was responsive and guided us through the setup process. Since then, we haven’t encountered any major issues.
What problems is the product solving and how is that benefiting you?
Before we implemented miniOrange, users had to maintain separate credentials for Oracle EBS, which led to frequent password-related support tickets and a fragmented login experience. After enabling Single Sign-On, they can access Oracle EBS with their corporate credentials, reducing login friction and helping them stay productive. Centralized authentication has also strengthened security, simplified user management, and supported our efforts to align with access governance requirements.