I help SaaS companies implement Enterprise SSO using Okta SSO, Microsoft Entra ID (Azure AD) SSO, Google Workspace SSO, AWS Cognito SSO, Keycloak SSO and Auth0 SSO. I solve complex SAML SSO, OAuth SSO, OpenID Connect (OIDC), SCIM, AD/LDAP, MFA and identity federation challenges for enterprise SaaS platforms.
From enterprise customer onboarding and multi-IdP authentication to identity migrations and production troubleshooting, I help organisations build secure, scalable identity solutions.
🎯 Identity & SSO Services
→ Implement Enterprise SSO using SAML 2.0, OAuth 2.0 and OpenID Connect
→ Integrate Okta, Microsoft Entra ID, Google Workspace, AWS Cognito, Keycloak and Auth0
→ Enable multi-IdP authentication for SaaS platforms
→ Resolve SAML errors, OAuth callbacks, redirect loops and login failures
→ Design secure authentication and authorization architectures
→ Implement SCIM provisioning and user lifecycle automation
→ Support enterprise customer SSO onboarding for B2B SaaS
🔐 Core IAM Expertise
✅ Enterprise SSO & Identity Federation
→ SAML SSO, OAuth 2.0 and OpenID Connect (OIDC)
→ Multi-IdP and identity broker integrations
→ Enterprise SSO for multi-tenant SaaS platforms
→ Identity federation architecture and custom authentication flows
→ SSO migrations and identity modernisation
✅ Authorization & Access Control
→ RBAC and ABAC implementation
→ Fine-grained authorization using OpenFGA and OPA
→ Secure API authentication and JWT validation
→ Session management and access policy enforcement
✅ MFA & Authentication Security
→ OTP, TOTP, WebAuthn, Passkeys, YubiKey and Push authentication
→ Conditional Access and adaptive authentication
→ Step-up, passwordless and risk-based authentication
✅ User Lifecycle & Provisioning
→ SCIM 2.0 integrations
→ Active Directory and LDAP integration
→ Automated provisioning and deprovisioning
→ JIT provisioning and identity lifecycle automation
→ Identity and federation migrations
✅ SSO Troubleshooting
→ SAML assertions, metadata and certificate issues
→ OAuth callback, redirect and token exchange errors
→ OIDC authentication and JWT validation issues
→ Login failures, redirect loops and session problems
→ Production authentication and federation debugging
🛠️ Identity Platforms
Primary
Okta SSO • Microsoft Entra ID (Azure AD) SSO • Google Workspace SSO • AWS Cognito SSO • Keycloak SSO • Auth0 SSO • Sailpoint SSO
Enterprise
Ping Identity • OneLogin • ForgeRock • IBM Verify • Shibboleth • ADFS • WSO2 Identity Server
Custom / Open Source
Custom SAML SP/IdP • IdentityServer • SimpleSAMLphp • LDAP • RADIUS
🧠 Why Clients Work With Me
→ Delivered Enterprise SSO integrations across 20+ identity providers
→ Deep understanding of SAML, OAuth and OIDC internals, not just configuration
→ Strong debugging capability for complex authentication and federation issues
→ Experience designing multi-tenant SaaS authentication architectures
→ Production-ready implementations with clear documentation and knowledge transfer
⚙️ Identity Technology Stack
SAML 2.0 • OAuth 2.0 • OpenID Connect • SCIM 2.0 • JWT • PKCE • MFA • WebAuthn • Passkeys • WS-Federation • Kerberos • Active Directory • LDAP • OpenFGA • OPA
Java • .NET • Node.js • Golang • Python • TypeScript • PHP
AWS • OCI • Docker • Kubernetes • CI/CD
📌 Available for Enterprise SSO implementations, IAM architecture, SSO troubleshooting, identity migrations and long-term IAM consulting.
Let’s build an identity solution that is secure, scalable and seamless.
LDAP
OKTA
Single Sign-On
Security Assertion Markup Language
Microsoft Azure
Google Workspace
Auth0
OAuth
User Identity Management
Active Directory Federation Services
OneLogin
Microsoft Active Directory
User Authentication
Multi-Factor Authentication
Provisioning
Sanjay K.
Gurugram, India
$30/hr
5.0
88 jobs
I am an experienced IT Infrastructure Engineer with 15+ years of hands-on expertise in designing, deploying, and managing enterprise IT environments. My specialization includes Windows Server, Active Directory, Hybrid AD with Entra ID, Microsoft 365, Exchange Server, Azure, AWS, and Virtualization. I help businesses modernize their IT infrastructure end-to-end — from on-premises servers and virtualization platforms (VMware/Hyper-V) to hybrid cloud integrations, Azure AD/Entra ID deployments, and modern desktop architecture.
I focus on delivering secure, scalable, and resilient hybrid IT solutions that enhance productivity, security, and compliance while supporting business growth.
Technical Expertise
🗄️ Windows Server & Active Directory
✅ Install, configure, and manage Windows Server 2003–2025
✅ DFS, DNS, DHCP, RDS, IIS, RAID, NAS
✅ Group Policy Objects (GPOs), AD replication, backup & restore
✅ Active Directory migrations & consolidations (domains/forests)
✅ Identity Services: ADFS, Azure SSO, MFA, SAML, OAuth, OpenID
✅ AD Security Auditing: BloodHound/SharpHound, Kerberoasting, ZeroLogon
☁️ Microsoft 365 & Cloud Services
✅ Administration of Exchange Online, SharePoint, OneDrive, Teams
✅ Domain & DNS setup: SPF, DKIM, DMARC, MX
✅ Security & Compliance: Defender for Endpoint & O365, DLP, Conditional Access, Sensitivity Labels, Azure Security Policies
✅ Tenant-to-tenant migrations: BitTitan, CodeTwo, SkyKick
✅ Hybrid Deployments: Exchange + O365, ADFS, Azure AD/Entra ID Connect
✅ Modern Workplace Management: Intune, Autopilot, Co-management, Windows 10/11, Windows 365/Cloud PC
🏢 Virtualization & Cloud Platforms
✅ VMware: ESXi, vCenter, vMotion, DRS, HA, NSX, vSAN, vROps
✅ Hyper-V: deployment, migration, clustering, Azure Stack HCI
✅ Azure Virtual Machines | VM Scale Sets | Availability Sets & Zones | ARM Templates | NSGs | Azure Bastion | Load Balancer | Azure Monitor | Backup & Site Recovery | Automation & Auto-Scaling | Hybrid VM Integration | High Availability | Cost Optimization
✅ AWS: IAM, EC2, S3, CloudFormation, cloud migrations
🔒 Security & Vulnerability Management
✅ Penetration testing & vulnerability scanning (Nessus, Qualys, Kali Linux)
✅ Remediation of Windows & AD vulnerabilities (SMB, PrintNightmare, LDAP signing)
✅ Zero Trust Security implementation & Identity Governance
✅ Backup & disaster recovery (StorageCraft, NAS, SkyKick, Quest Recovery Manager, DRaaS)
⚡ Automation & RMM Tools
✅ PowerShell scripting & DSC automation
✅ Graph API & Microsoft 365 automation
✅ RMM tools: Intune, Datto RMM, ConnectWise, NinjaOne, ManageEngine
✅ Endpoint management, application deployment & compliance
📞 Collaboration & Messaging
✅ Teams Phone System & Direct Routing
✅ Exchange Hybrid Architecture & migrations
✅ PBX integration
🏆 Why Work With Me / Achievements / Key Results
🏅 Upwork Top-Rated Expert – recognized for delivering high-quality IT infrastructure and cloud solutions
🏅 Certified IT Infrastructure Expert – Microsoft, Azure, AWS, VMware, and Security certifications
🏅 23K+ hours worked – extensive hands-on experience with diverse enterprise projects
🏅 $400K+ earned – proven track record of client satisfaction and successful project delivery
🏅 Enterprise & Cloud Expertise – implemented hybrid AD, Azure, Microsoft 365, VMware, and AWS solutions for multiple organizations
💡 Online Consultation Available
⭐ Review your IT environment
⭐ Identify challenges & solutions
⭐ Create a custom step-by-step action plan
📅 Schedule your consultation directly on Upwork at your convenience.
Whether you need full project delivery or expert guidance, I ensure your IT infrastructure is secure, efficient, and optimized for growth.
Office 365
Security Management
Business with 1000+ Employees
Microsoft SharePoint
VMware Administration
Active Directory Federation Services
Group Policy
Microsoft Active Directory
Microsoft Azure Administration
Windows Server
Microsoft Hyper-V Server
High Availability and Disaster Recovery
AWS Server Migration
Microsoft Intune
Microsoft SCCM
Vasanth K.
Madurai, India
$60/hr
5.0
120 jobs
I help SaaS platforms and enterprise applications design and implement secure and scalable Single Sign-On (SSO) and authentication systems using SAML, OIDC, OAuth, LDAP, and Kerberos.
✔ 500+ SSO integrations delivered
✔ Enterprise-grade identity systems
✔ Expertise in Auth0, Azure AD, Keycloak, and custom IdP development
If your authentication system is critical to your business, I can help design and implement it correctly.
I design and build custom Identity Providers (IdPs) and full authentication systems tailored to complex business requirements.
If you're facing issues with authentication, SSO setup, or identity provider integration — I can help you design and implement a reliable, production-ready solution.
━━━━━━━━━━━━━━━━━━━
🎯 I Can Help You With
• SAML / OIDC SSO integration
• Fixing broken authentication flows
• Azure AD / Auth0 / Keycloak setup
• Custom Identity Provider (IdP) development
• LDAP / Active Directory authentication
• Kerberos / SPNEGO (Windows SSO)
━━━━━━━━━━━━━━━━━━━
🔐 SSO & Identity Expertise
• SAML 2.0 (SSO, SLO, metadata, assertions)
• OpenID Connect (OIDC) & OAuth 2.0
• Custom Identity Provider (IdP) development
• LDAP / Active Directory integration
• Kerberos authentication & SPNEGO (Windows Integrated Auth)
• Multi-tenant authentication systems
• MFA implementation & secure login flows
Identity Providers:
Auth0, Azure AD, Okta, Keycloak, Shibboleth, ADFS, Google Workspace, OneLogin, WSO2, Apereo CAS, SimpleSAMLphp
━━━━━━━━━━━━━━━━━━━
☁️ Cloud & Serverless (Supporting Expertise)
• AWS Lambda, API Gateway, Firebase, Azure Functions
• Scalable backend architecture & microservices
• CI/CD pipelines and cloud automation
━━━━━━━━━━━━━━━━━━━
💻 Application Development (Supporting SSO Integrations)
• ASP.NET MVC / .NET
• Laravel / PHP
• WordPress / CMS platforms
I build secure applications with seamless SSO and API integrations.
━━━━━━━━━━━━━━━━━━━
📱 Mobile Authentication Integration
• iOS (Swift) & Android (Kotlin)
• Secure login flows (OAuth/OIDC)
• Backend + authentication integration
━━━━━━━━━━━━━━━━━━━
🖥️ DevOps & Infrastructure
• AWS, Azure, DigitalOcean
• Linux / Windows Server
• Nginx, Apache, IIS
• SSL, deployment, scaling, and performance optimization
━━━━━━━━━━━━━━━━━━━
🌟 Why Work With Me
• Deep expertise in SSO & authentication systems
• Proven experience delivering 500+ SSO integrations across SaaS and enterprise environments
• Quick turnaround for SSO integrations and authentication fixes
• Ability to build custom IdPs and full authentication flows
• Strong enterprise authentication knowledge (LDAP, Kerberos, AD)
• End-to-end delivery — from architecture to deployment
━━━━━━━━━━━━━━━━━━━
💬 Let’s Talk
Need help with:
• SAML / OIDC SSO integration
• Custom Identity Provider (IdP) development
• LDAP / Active Directory authentication
• Kerberos / SPNEGO setup
• Fixing authentication issues
• Identity provider setup (Auth0, Azure AD, etc.)
Let’s discuss your requirements — I can help you implement a clean and scalable solution.
Single Sign-On
Security Assertion Markup Language
OKTA
OneLogin
Active Directory Federation Services
Multi-Factor Authentication
User Authentication
User Identity Management
Amazon Cognito
OAuth
AWS Amplify
AWS Lambda
Serverless Stack
Serverless Computing
Mobile App Development
Node.js
Cloud Engineering
DevOps
Nevin D.
Chalakudy, India
$20/hr
4.9
802 jobs
I am Nevin Davis, a Red Hat Certified Engineer with a degree and diploma in Computer Science and Engineering. Over the past 14 years, I have evolved from a dedicated Server Administrator into a seasoned DevOps practitioner, bridging the gap between traditional infrastructure and modern cloud-native environments.
My philosophy is simple: Automate everything, monitor everything, and secure everything. I specialize in transforming manual, legacy server setups into highly resilient, self-healing architectures. Whether you need a complex multi-cloud deployment, a hardened cPanel migration, or a fully automated CI/CD pipeline, I bring a meticulous, engineering-first approach to every project.
Core DevOps & Automation Competencies:
• CI/CD & Pipeline Engineering: Expert in designing end-to-end automation workflows. Proficient
in Jenkins, GitLab CI, and GitHub Actions to streamline code deployment, testing, and release cycles.
• Infrastructure as Code (IaC): Deep experience in defining and managing infrastructure using Terraform and AWS CloudFormation, ensuring your environments are version-controlled, reproducible, and scalable.
• Configuration Management: Skilled in using Ansible (and basic knowledge of Puppet/Chef) to standardize server configurations, enforce security baselines, and eliminate configuration drift across thousands of nodes.
• Containerization & Orchestration: Hands-on experience with Docker for application
containerization and Kubernetes (K8s) for container orchestration, including Helm chart
management and service mesh integration.
• Cloud Architecture (AWS, GCP, Azure): Proficient in designing highly available, fault-tolerant systems across all three major cloud providers, including cost-optimization strategies and serverless architectures (Lambda, Cloud Functions).
Legacy & System Administration Expertise (The Foundation):
• Linux/Unix Mastery: Advanced administration of RHEL, CentOS, Cloudlinux, Ubuntu, and Almalinux. Expert in kernel reconfiguration, parameter tuning, SELinux, and LVM management.
• Virtualization & Hypervisors: Extensive management of XEN, OpenVZ, and KVM, including the administration of SolusVM and IPMI/KVM console management.
• Web Hosting Control Panels: Deep, specialized knowledge in cPanel/WHM, alongside Plesk, Interworx, DirectAdmin, CyberPanel, and HestiaCP.
• Web Server Optimization: Expert tuning of Apache, LiteSpeed, and Nginx to handle high-traffic loads with minimal latency.
• Security & Hardening: Implementation of strict security protocols including firewall
configurations, intrusion detection, antivirus installation, and comprehensive server hardening.
• Storage & Backup: Management of RAID configurations, NFS, FTP, and enterprise-grade backup solutions (Idera) to ensure data integrity and rapid disaster recovery.
• Migration Specialist: Seamless migration of websites, applications, and entire server stacks between platforms, clouds, or data centres with zero downtime.
• Monitoring & Observability: Implementation of proactive monitoring using Nagios, Zabbix, and cloud-native tools (CloudWatch) to prompt performance bottlenecks.
• Billing & Support Systems: Administration and customization of WHMCS, Vision, and osTicket to streamline business operations.
Why Work With Me?
I don't just "fix" servers; I build ecosystems. I take the time to understand your business requirements and translate them into technical roadmaps that ensure uptime, security, and agility. With a Red Hat pedigree and a decade and a half of battle-tested experience, I am equipped to handle the most complex, mission critical environments you can throw at me.
Let's automate your success.
WordPress
cPanel
OpenVZ
Domain Migration
Red Hat Administration
WHMCS Development
SSL
Linux System Administration
CentOS
Web Host Manager
Rahul M.
Pune, India
$55/hr
5.0
37 jobs
Need a secure, seamless Single Sign-On (SSO) solution for your business? I can help.
I’m a Senior IAM Consultant with 8+ years of experience specializing in Identity and Access Management (IAM). I design and implement robust authentication systems using Okta, Microsoft Entra ID (Azure AD), Keycloak, Shibboleth, OneLogin, Auth0, OpenFGA, and custom SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) providers. I also have expertise in LDAP, WS-Fed, RADIUS, JWT, and other authentication protocols to simplify access control and safeguard critical data.
My Expertise:
✅ SSO & Authentication Solutions – Implementing SAML 2.0, OAuth 2.0, JWT-based logins, API key-based security, and server-to-server authentication.
✅ IAM Integration & Setup – Configuring Okta, Microsoft Entra ID, Keycloak, ADFS, OneLogin, Auth0, Identity Server 8, and other IAM providers, Simple SAML PHP.
✅ Troubleshooting Authentication Issues – Resolving login-related issues for SAML, OAuth, and custom identity providers.
✅ Fine-Grained Authorization – Deploying reverse proxy and bridge solutions, OpenFGA, and custom authorization mechanisms.
✅ User Provisioning & Governance – Secure provisioning/de-provisioning of users, groups, and resources via SCIM, custom scripts, or scheduled sync with databases, Active Directory, or other identity sources.
✅ Multi-Factor Authentication (MFA) & Identity Governance – Enhancing security with strong IAM policies.
Technical Skills:
I am proficient in PHP, Java, JavaScript, Python, Golang, Shell Scripting, and various frameworks, including Spring, Spring Boot, Node.js, React, Angular, Django, WordPress, CodeIgniter, Symfony, Laravel, Gin, and more.
DevOps & Cloud Security:
✅ Cloud & On-Prem Infrastructure – Hands-on experience with AWS, EKS, EC2, Kubernetes (K8s), Docker, KAAS, SAAS, and on-prem deployments.
✅ Application Deployment & Security – Securing and deploying applications in cloud and on-prem environments.
🛠️ Identity Providers I’ve Worked With (100+):
✅ Google SSO login
✅ Microsoft Entra ID (Azure AD) SSO
✅ Okta SSO Integration
✅ Keycloak SSO
✅ Oracle IAM – OCI IAM, OAM, OIM
✅ Oracle Student Financial Aid (SFA)
✅ GitHub SSO
✅ Ping Federate SSO Login
✅ Auth0 Universal Login Setup
✅ OneLogin SSO Integration
✅ Shibboleth IdP/SP
✅ JumpCloud SSO Login
✅ ForgeRock IAM
✅ IdentityServer4/8
✅ WSO2 Identity Server
✅ SimpleSAMLphp
✅ Custom SAML SPs
✅ AWS Cognito SSO
✅ Salesforce SSO
✅ G Suite Login
✅ Apple & Facebook OAuth
✅ Slack / Zoom OAuth Integration
✅ ADFS (Active Directory Federation Services)
✅ LDAP & RADIUS Authentication
✅ CyberArk Identity
✅ Centrify (now Delinea)
✅ IBM Security Verify / Tivoli Access Manager
✅ NetIQ Access Manager / Micro Focus
✅ Bitwarden SSO / Enterprise Login
✅ Duo SSO (Cisco Secure Access)
✅ VMware Workspace ONE Access (formerly vIDM)
✅ Zoho Directory / SSO
✅ Atlassian Access (Jira, Confluence SSO)
✅ SAP IAS / IPS
✅ Azure B2C & B2B Flows
✅ Facebook Workplace SSO
✅ Moodle SSO (via SAML / OIDC plugins)
✅ Canvas LMS SSO Integration
✅ OpenAM (legacy Sun Access Manager)
✅ FreeIPA / Red Hat SSO
✅ Ory Hydra / Kratos
✅ FusionAuth
✅ Gluu Server / Janssen Project
✅ NetIQ eDirectory SSO
✅ Apache Knox (for Hadoop ecosystem)
✅ IBM ISAM / ISVA
✅ Citrix Gateway (SSO via SAML/OAuth)
✅ Palo Alto Prisma Access (SAML Integration)
✅ CrowdStrike Falcon Identity
✅ BeyondTrust Identity Security
✅ Keeper Enterprise SSO
✅ Zoho One / Zoho Directory
✅ Freshworks SSO (Freshservice, Freshdesk)
✅ ServiceNow SSO Integration
If you're looking for an IAM expert who can secure your authentication workflows, integrate IAM solutions, and troubleshoot identity-related challenges, let's connect!
LDAP
Single Sign-On
Security Assertion Markup Language
OAuth
OKTA
Auth0
OneLogin
Linux
NGINX
User Authentication
Web Proxy
Multi-Factor Authentication
Active Directory Federation Services
Shopify
Shopify Development
Rajendiran C.
Bengaluru, India
$30/hr
4.9
77 jobs
SSO developer with 8+ years of experience in to identity and access management.Possess good knowledge on integrating different apps using SAML/OIDC/OAUTH.
Possess experience in using different libraries for saml/oidc that includes below programming langauge:
★ NodeJs
★ ReactJS
★NestJS
★ Angular
★ PHP/larvel
★ Python
★ .NET
Possess experience in using different identity providers such as :
★ KeyCloak
★ AzureAD
★ PINGFed/PingOne
★ Auth0
★ OKTA
★ ISAM/ISIM
★ AWS
★ SailPoint
Spring Security
PHP
Java Servlet API
OAuth
User Identity Management
Microsoft Azure
OKTA
Firebase
NodeJS Framework
React
Single Sign-On
AWS Application
Security Assertion Markup Language
How it works
Post a job for freePost a job
Tell us what you need. Create your own job post or generate one with AI then filter talent matches.
Hire top talent fast
Consult, interview, and hire quickly, so you can meet the freelancers you're excited about.
Collaborate easily
Use Upwork to chat or video call, share files, and track project progress right from the app.
Payment simplified
Manage payments in one place with flexible billing options. Only pay for approved work, hourly or by milestone.
Don't just take our word for it
“Upwork provides an umbrella-level of security. I can see a talent’s work history and ratings. I can hold payments in escrow. I can communicate through Upwork Messages instead of working through my email address.”
KD
Kim Darling
Emerald Tiger
“Upwork is the best platform to hire skilled professionals when we're not looking for a full-time employee. All the companies in our portfolio use Upwork to find talent across a wide range of fields.”
DM
David Merry
Kinetic Investments
“Our very specific requirements can be a challenge—With Upwork, we’re able to access a bigger community to ensure the success of our projects.”
KK
Katja Krohn
Summa Linguae
How do I hire a LDAP Specialist in India on Upwork?
You can hire a LDAP Specialist in India on Upwork in four simple steps:
Create a job post tailored to your LDAP Specialist project scope. We'll walk you through the process step by step.
Browse top LDAP Specialist talent on Upwork and invite them to your project.
Once the proposals start flowing in, create a shortlist of top LDAP Specialist profiles and interview.
Hire the right LDAP Specialist for your project from Upwork, the world's largest work marketplace.
At Upwork, we believe talent staffing should be easy.
How much does it cost to hire a LDAP Specialist?
Rates charged by LDAP Specialists on Upwork can vary with a number of factors including experience, location, and market conditions. See hourly rates for in-demand skills on Upwork.
Why hire a LDAP Specialist in India on Upwork?
As the world's work marketplace, we connect highly-skilled freelance LDAP Specialists and businesses and help them build trusted, long-term relationships so they can achieve more together. Let us help you build the dream LDAP Specialist team you need to succeed.
Can I hire a LDAP Specialist in India within 24 hours on Upwork?
Depending on availability and the quality of your job post, it's entirely possible to sign up for Upwork and receive LDAP Specialist proposals within 24 hours of posting a job description.