Ory Acquires BoxyHQ: Introducing Ory Polis for Enterprise Single-Sign On
In a strategic move set to modernize the identity and access management landscape, Ory has acquired BoxyHQ and launched Ory Polis. Ory Polis addresses organizational identity needs across environments reliant on SAML and SCIM protocols. Previously known as BoxyHQ's Jackson, brings enterprise-ready single sign-on (SSO), directory synchronization, and self-service onboarding to organizations requiring robust B2B and B2B2C identity infrastructure.

Ory Polis: The Complete Solution for Enterprise SSO
Ory Polis directly addresses the complex authentication needs of modern enterprises and SaaS platforms. It serves as a unified solution for all things SSO, whether organizations require:
- SAML integrations
- OIDC support
- A seamless bridge between the two
- SCIM-based directory synchronization
This versatility makes Ory Polis uniquely positioned to support both B2B and B2B2C use cases, providing enterprises with a clear path to modern identity infrastructure without disrupting existing systems.
Want to learn more about Ory Polis? Join us for an exclusive webinar to see real-world use cases, demos, and Q&A with our identity experts.
The Identity Challenge for Modern Companies
For years, SaaS companies have faced a challenging dilemma when serving enterprise customers: how to efficiently support B2B and B2B2C use cases that require enterprise SSO and directory synchronization. Engineering teams often need specialized SAML expertise and significant resources to properly implement these enterprise-required features.
The consequence? Months of specialized engineering effort that diverts valuable resources away from core product development. This challenge creates a barrier between SaaS companies and enterprise adoption and their customer end users for that matter.
From BoxyHQ Jackson to Ory Polis: Enterprise SSO Made Simple
What traditionally required months of engineering effort and specialized SAML expertise can now be implemented through Ory Polis's simple API integrations in a matter of days if not hours. Developers can visit www.mocksaml.com to test how SAML authentication can be seamlessly integrated using just a few lines of code.
As the evolution of BoxyHQ Jackson, Ory Polis maintains the developer-friendly approach while expanding its enterprise capabilities. What makes Ory Polis particularly valuable is its comprehensive approach to enterprise SSO needs:
- A powerful SAML-to-OIDC bridge that allows companies to accept legacy SAML connections from enterprise customers while providing modern OIDC protocols internally or to their customers
- SCIM protocol support for standardized user provisioning and management
- Simple, self-service onboarding flows and step-by-step guidance for enterprise IT administrators
This combination provides enterprises and their customers a clear path to modern identity standards without breaking compatibility with existing systems.
Strategic Rationale: Why This Acquisition Makes Sense
The acquisition enhances Ory's comprehensive offering by adding critical capabilities for B2B and B2B2C use cases through Ory Polis. While Ory already delivers a powerful composable, developer-friendly IAM stack, Ory Polis brings immediate additional capabilities in areas essential for enterprise adoption:
- Universal SSO support: Enterprise-grade SAML and OIDC service provider and identity provider capabilities for both organizations and user groups
- Directory Synchronization: Standardized user provisioning and deprovisioning across systems through SCIM support
- Self-Service Administration: IT admin user experience that streamlines their onboarding and management of SSO connections
Enterprises can access organizational capabilities immediately through the Ory Network as a fully managed SaaS solution, eliminating operational overhead.
For organizations that require full control of their infrastructure, Ory Polis maintains its modular, self-hostable architecture which perfectly aligns with Ory's philosophy of providing composable identity infrastructure that adapts to existing systems rather than forcing disruptive migrations.
A Unified Platform for B2B and B2B2C Identity Needs
With Ory Polis, Ory positions itself as the only identity platform that effectively supports both B2B and B2B2C identity needs in a flexible, modular way. Unlike traditional IAM vendors or point solutions that force an all-or-nothing approach, Ory Polis allows companies to:
- Implement robust enterprise SSO across OIDC and SAML protocols through consistent APIs
- Support enterprise requirements without compromising on developer experience
- Maintain compatibility with legacy systems while providing a path to modern security practices
- Deploy identity infrastructure in any environment to address unique architecture and data localization requirements
Immediate Customer Benefits
The integration of Ory Polis into Ory's ecosystem delivers several immediate benefits:
- Enterprise readiness: SAML-based SSO that previously took months to implement can now be launched in days using self-service setup links
- Unified identity infrastructure: Companies can serve enterprise clients and their end-users with a single flexible platform, streamlining B2B and B2B2C identity management
- Improved security posture: Self-service setup allows partners and customers to configure their SAML or directory sync integrations without exchanging credentials or requiring manual configuration
- Deployment flexibility: Ory Polis supports both cloud and self-hosted deployments, making it ideal for companies with specific compliance or data residency requirements
A Vision for Modern, Composable Identity
The launch of Ory Polis represents a key step in Ory's larger vision for modern identity infrastructure. By enhancing enterprise capabilities for B2B and B2B2C use cases, Ory Polis provides a clear path to modern identity systems for organizations of all sizes.
The SAML-to-OIDC bridge within Ory Polis offers enterprises and their customers a pragmatic path forward. This allows them to modernize their identity systems without breaking compatibility with existing environments. This "path to modern" approach acknowledges that identity transformation is a journey that requires supporting both legacy systems and modern protocols simultaneously.
Looking Ahead
With Ory Polis now part of Ory's identity ecosystem, the company is uniquely positioned to become the default choice for organizations needing comprehensive identity solutions across B2B and B2B2C scenarios. Ory Polis reduces complexity and accelerates time-to-value — all while maintaining the developer experience and flexibility that have been hallmarks of Ory's IAM stack that addresses IAM needs from identity management, passwordless authentication, fine-grained authorization, and more.
As identity becomes increasingly central to security and user experience, Ory Polis represents not just a new product offering, but a strategic move toward a more unified and efficient approach to identity and access management.
For SaaS companies struggling with the complexity of supporting enterprise customers in B2B and B2B2C scenarios, the message is clear: Ory now offers the most comprehensive path to modern identity infrastructure, regardless of where you are in your IAM journey.
Join us for an exclusive webinar on Ory Polis where we cover real-world implementation use cases, and provide a live demo, followed by an interactive Q&A session with our identity experts.
Further reading

The Future of Identity: How Ory and Cockroach Labs Are Building Infrastructure for Agentic AI

Ory and Cockroach Labs announce partnership to deliver the distributed identity and access management infrastructure required for modern identity needs and securing AI agents at global scale.

Ory + MCP: How to secure your MCP Servers with OAuth2.1

Learn how to implement secure MCP servers with Ory and OAuth 2.1 in this step-by-step guide. Protect your AI agents against unauthorized access while enabling standardized interactions.