Breaking
Founded 2013 in Oakland, California 200+ universities rely on Cirrus for managed identity Bridges Okta, Entra ID & Duo to InCommon & eduGAIN Retire Shibboleth without touching a single app Yale · Michigan · Chicago · Carnegie Mellon · Brown Founder Dedra Chamberlin ran identity for UC Berkeley & UCSF Founded 2013 in Oakland, California 200+ universities rely on Cirrus for managed identity Bridges Okta, Entra ID & Duo to InCommon & eduGAIN Retire Shibboleth without touching a single app Yale · Michigan · Chicago · Carnegie Mellon · Brown Founder Dedra Chamberlin ran identity for UC Berkeley & UCSF
YesPress Company Dossier Identity & Access Management Oakland, CA · Est. 2013
The company that logs you in

Cirrus Identity

The quiet plumbing that lets more than 200 universities log people in - without anyone noticing the plumbing.

Cirrus Identity logo
THE SUBJECT: A wordmark built for the world it serves - a cloud, because the service is cloud-hosted, and a color scheme that would look at home on any campus IT portal. It is the kind of logo you never think about, which is exactly the point of the software behind it.
2013
Founded
200+
Universities
~21
Employees
24/365
Support
01

The Business of the Login Nobody Sees

Here is a fact about enterprise software that is both boring and load-bearing: the identity system a university buys is almost never the identity system it actually needs. It buys Okta, or Microsoft Entra ID, or Duo - modern, commercial, well-supported. And then it discovers that none of those products speak the language its faculty live in, which is a set of academic trust networks with names like InCommon, eduGAIN, the Canadian Access Federation and GakuNin. The commercial vendors mostly shrug at this. It is a niche. It is higher ed.

Cirrus Identity is the company that decided the niche was the whole point. Founded in 2013 in Oakland, California by staff out of UC Berkeley's CalNet identity program, it does something unglamorous and genuinely necessary: it sits in between. It proxies. It bridges. It translates one authentication protocol into another so that the shiny commercial identity provider a campus just bought can talk to the multilateral federation its researchers have belonged to for years.

You can describe this in the grand language of the industry - "Zero Trust," "federated identity management," "multi-protocol federation" - and Cirrus does. But the plainer description is more useful. When a student, an alumnus, a visiting scholar or a job applicant clicks "log in" at one of these institutions, something has to decide who they are and whether they belong, and route that decision across systems that were never designed to cooperate. Increasingly, at a couple hundred campuses, the thing doing the routing is Cirrus.

The company likes to be called "the Swiss army knife of digital identity management," which is a modest way of saying it does the fiddly parts. Certificate rotation. Federation event logging. Log streaming into a SIEM. Guest accounts and account linking and the sponsored-invitation flow for the contractor who needs access for six weeks. This is not the work that gets written up in tech magazines. It is the work that pages someone at 2 a.m. when it breaks, which is why institutions are willing to pay someone else to own it.

There is a certain logic to a company like this existing. Higher education moves slowly and standardizes heavily, which means the protocols it depends on - SAML, CAS, OpenID Connect - stick around for decades. A vendor that commits to serving that community, and only that community, ends up with a moat made of nobody-else-wants-to. That is not a knock. It is a strategy.

"The Swiss army knife of digital identity management" - unifying enterprise and consumer single sign-on so users stop fighting the login box. - How the company describes itself
02

What Cirrus Actually Sits Between

The whole product is a translator in the middle. On one side, the identity provider a campus already runs. On the other, the federations and apps it needs to reach. Cirrus makes them agree.

Your IdPOKTA · ENTRA ID · DUO · GOOGLE
Cirrus Bridge / ProxyPROTOCOL TRANSLATION · MFA · LOGGING
Federations & AppsINCOMMON · EDUGAIN · CAF · GAKUNIN · CAS
The selling point of the Bridge is subtraction: you get to delete Shibboleth, ADFS or SimpleSAMLphp - and none of your applications ever notice.
03

The Toolkit

Flagship

Cirrus Bridge

Consolidate SSO on Entra ID, Okta or Duo while still supporting multilateral federation and CAS apps. The path to retiring Shibboleth, ADFS or SSP without changing downstream applications.

Core

Authentication Proxy

An identity provider proxy that standardizes authentication across IdPs and legacy systems, with bilateral SAML integrations and an optional TOTP-based MFA add-on.

Since 2014

Cirrus Gateway

The company's first product. Lets institutions accept social and third-party sign-in - Google, Facebook, LinkedIn - for users outside the campus directory.

External Users

Guest & Alumni Access

Sign-in for applicants, alumni and guests: guest accounts, account linking, sponsored invitations and Slate applicant sign-in extensions.

Operations

Admin Console & Logs

Administrative console with federation event logging, a log API and SIEM log streaming - the monitoring and compliance layer campuses need.

Delivery

Managed & Hosted

Cloud-hosted, highly available, with 24/365 production support. Priced by annual authentications, sold direct and via AWS Marketplace private offers.

04

Who's Behind the Login Box

Over 200 universities use Cirrus, alongside research organizations, non-profits and healthcare institutions. A sampling of the marquee names:

YaleUniv. of Michigan Univ. of ChicagoUC Berkeley Carnegie MellonBrown Penn StateIndiana University Duke
200+
Institutions served
4
Global federations bridged
2014
First product shipped
B2B
Subscription + implementation
05

The Founder

Dedra Chamberlin is Cirrus Identity's founder and CEO, and her path to it is not the usual one. Before software, her academic background was in city and regional planning and Latin American studies. She moved into university identity management and rose to Deputy Director of Identity and Access Management at UC Berkeley and UCSF, where she chaired the workgroup that crafted the University of California's system-wide identity strategy.

The origin story is refreshingly literal: she had spent years solving identity for one institution and decided she could either keep serving a single campus or build something that served many. She chose many. Cirrus is what a domain expert builds when she stops solving her own problem and starts solving everyone's version of it - which is also why the engineering and support staff are drawn from campus identity programs at Stanford, Duke, Michigan and Wisconsin.

She could serve one campus's identity needs, or she could serve many. Cirrus Identity is the version where she picked "many." - On why the company exists
06

A Short History

2013

Founded in Oakland

Staff from UC Berkeley's CalNet identity program start a company to bring managed identity to many institutions at once.

MARCH 2014

Cirrus Gateway ships

The first product lets campuses accept social logins - Google, Facebook, LinkedIn - for external users.

2016

Seed funding

An angel-backed seed round (roughly $350K-$460K total; investors have included Merian Ventures and Golden Seeds) funds growth.

2025

Deepening Entra ID

Announces a partnership to improve Microsoft Entra ID integrations for higher education.

2026

Assurance & certificates

Publishes guidance on configuring the Enterprise Bridge for REFEDS Assurance and managing certificates across federated deployments.

"Enable Zero Trust in higher ed through a suite of Cirrus Works solutions."

- Cirrus Identity, on its mission
07

Details That Amuse and Inform

Named after a cloud

"Cirrus" is a cloud type - a fitting name for a service that is, quite literally, cloud-hosted.

Small team, big footprint

Roughly two dozen people sit in the authentication path of hundreds of thousands of students, faculty and alumni. That's leverage.

The product is deletion

The most-cited reason to buy the Bridge is to remove software - retire Shibboleth - without breaking the apps that depend on it.

A planner's pivot

The founder's degrees are in city planning and Latin American studies, not computer science. Identity found her.

08

Watch, Read, Explore

Product demos, webinars and talks live on the company's channels. Start with the Cirrus Identity product demos on YouTube, then dig into the deep-dives on the Federated Identity Management blog.

09

Find Cirrus Identity

Oakland, California · 4031 Brighton Avenue · +1 510-710-1554
Profile compiled from public sources including the company website, LinkedIn, Crunchbase and press. Funding and headcount figures are approximate. Facts current as of mid-2026.

Quick facts: Cirrus Identity

Cirrus Identity is an Oakland-based software company that runs managed, cloud-hosted identity and access management for higher education, research institutions, non-profits and healthcare. Founded in 2013 by former UC Berkeley identity staff, it acts as a proxy and bridge between commercial identity providers (Entra ID, Okta, Duo, Google) and the multilateral research-and-education federations - InCommon, eduGAIN, the Canadian Access Federation and GakuNin - that campuses depend on but that most commercial IdPs do not support. More than 200 universities use it to retire aging Shibboleth deployments, let alumni and applicants log in with social accounts, and standardize authentication without rebuilding every application.

Founded
2013
Headquarters
Oakland, California, United States
Founders
Dedra Chamberlin (Founder & CEO)
Team size
~21 employees
Products
Cirrus Bridge, Cirrus Proxy / Authentication Proxy, Cirrus Gateway, External User Solutions, Admin Console & Logs
Notable
Grew from a single-campus expertise base to serving 200+ universities., Launched Cirrus Gateway in March 2014, giving campuses social-login capability early., Built managed support for multilateral federation (InCommon, eduGAIN, CAF, GakuNin) that most commercial IdPs do not offer.

Last updated: