Security & compliance
What is SAML SSO?
Authenticating users through your identity provider rather than tool-specific credentials.
Single sign-on centralizes access: one identity provider, one offboarding action, MFA enforced in one place. Without it, every tool becomes an account someone has to remember to revoke when an engineer leaves.
It is also the classic enterprise-tier paywall. Budget for it, because the price step from the plan you want to the plan with SSO is frequently the largest single jump in these products' pricing.
What to look for
- SAML 2.0 and OIDC support, and which identity providers are tested
- Just-in-time provisioning, and whether SCIM deprovisioning exists
- Whether SSO can be enforced for all users rather than offered optionally
- Which plan tier it requires
Best 19 code quality, security and code review tools with SAML SSO
Every tool in the directory whose documentation covers this, 18 fully and 1 partially. Full support is shown first. Shown in a random order that changes on every visit, so no tool gets an advantage from its position.
Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.
Code Security Platform
AikidoSAML SSO included from the Basic tier, not gated to Enterprise
AI Coding Agent
ChatGPT / CodexSAML SSO and MFA are listed as included in the Business plan on the pricing page.
Code Security Platform
Checkmarx OneIAM console supports platform-level SAML v2.0 (Okta, Azure AD, generic), OpenID Connect, and LDAP login.
AI Coding Agent
Claude CodeEnterprise plans include SSO identity federation via OIDC.
Code Quality Platform
CodacySAML 2.0 with Okta, Azure AD, Google Workspace and JIT provisioning; Business plan only.
PR Review Tool
CodeAnt AISSO, SAML and SCIM are listed on the Enterprise Plan only.
PR Review Tool
CodeRabbitEnterprise SSO workspaces with IdP-member to Git-identity linking; Enterprise plan only
Code Quality Platform
CodeSceneMicrosoft Entra ID SSO (OIDC) on Cloud from Pro; on-prem LDAP/Active Directory and OAuth2/OpenID Connect SSO is an Enterprise inclusion; SAML not named.
Code Security Platform
CorgeaSAML SSO (Okta, Entra ID, generic) with SCIM provisioning; SSO and SCIM is Enterprise-only on pricing
PR Review Tool
Cursor (Bugbot)SAML/OIDC SSO listed in Teams Standard plan inclusions.
Code Quality Platform
DeepSourceSAML SSO supported on DeepSource Enterprise Server only.
AI Coding Agent
Gemini Code AssistCloud Identity or Google Workspace accounts with support for externally federated identity providers and 2-step verification.
PR Review Tool
GreptileSAML SSO via bundled BoxyHQ Jackson service, documented for self-hosted deployments
PR Review Tool
QodoSSO via WorkOS with SAML and OIDC providers including Okta, Entra ID, PingFederate, Keycloak
Code Security Platform
SemgrepSAML SSO (Google Workspace, Microsoft Entra ID) plus OIDC and managed GitHub/GitLab auth; listed under Teams.
Code Security Platform
SnykSSO available on Ignite and Enterprise; SAML not named; Snyk for Government is Okta-managed SSO.
Code Quality Platform
SonarQubeMultiple SSO providers and LDAP/Active Directory options, but Enterprise SSO is Enterprise-only.
Code Security Platform
VeracodeSSO/SAML documented, including a SAML gateway for standalone Security Labs accounts
Code Quality Platform
QltyPartialGitHub OAuth SSO only; no SAML, no password storage, no other identity providers documented
Related terms
FAQ
What is SAML SSO?
Authenticating users through your identity provider rather than tool-specific credentials.
How many tools in the directory offer SAML SSO?
19 of the 20 tools in this directory offer SAML SSO, 18 fully and 1 partially:
Support is not the same as parity, since some implementations are narrower in scope, gated to a higher plan tier, or maintained only for existing customers. The note under each tool is what its own documentation describes.
What should you check when comparing tools with SAML SSO?
Four things:
- SAML 2.0 and OIDC support, and which identity providers are tested
- Just-in-time provisioning, and whether SCIM deprovisioning exists
- Whether SSO can be enforced for all users rather than offered optionally
- Which plan tier it requires