The quiet plumbing that lets more than 200 universities log people in - without anyone noticing the plumbing.
Here is a fact about enterprise software that is both boring and load-bearing: the identity system a university buys is almost never the identity system it actually needs. It buys Okta, or Microsoft Entra ID, or Duo - modern, commercial, well-supported. And then it discovers that none of those products speak the language its faculty live in, which is a set of academic trust networks with names like InCommon, eduGAIN, the Canadian Access Federation and GakuNin. The commercial vendors mostly shrug at this. It is a niche. It is higher ed.
Cirrus Identity is the company that decided the niche was the whole point. Founded in 2013 in Oakland, California by staff out of UC Berkeley's CalNet identity program, it does something unglamorous and genuinely necessary: it sits in between. It proxies. It bridges. It translates one authentication protocol into another so that the shiny commercial identity provider a campus just bought can talk to the multilateral federation its researchers have belonged to for years.
You can describe this in the grand language of the industry - "Zero Trust," "federated identity management," "multi-protocol federation" - and Cirrus does. But the plainer description is more useful. When a student, an alumnus, a visiting scholar or a job applicant clicks "log in" at one of these institutions, something has to decide who they are and whether they belong, and route that decision across systems that were never designed to cooperate. Increasingly, at a couple hundred campuses, the thing doing the routing is Cirrus.
The company likes to be called "the Swiss army knife of digital identity management," which is a modest way of saying it does the fiddly parts. Certificate rotation. Federation event logging. Log streaming into a SIEM. Guest accounts and account linking and the sponsored-invitation flow for the contractor who needs access for six weeks. This is not the work that gets written up in tech magazines. It is the work that pages someone at 2 a.m. when it breaks, which is why institutions are willing to pay someone else to own it.
There is a certain logic to a company like this existing. Higher education moves slowly and standardizes heavily, which means the protocols it depends on - SAML, CAS, OpenID Connect - stick around for decades. A vendor that commits to serving that community, and only that community, ends up with a moat made of nobody-else-wants-to. That is not a knock. It is a strategy.
The whole product is a translator in the middle. On one side, the identity provider a campus already runs. On the other, the federations and apps it needs to reach. Cirrus makes them agree.
Consolidate SSO on Entra ID, Okta or Duo while still supporting multilateral federation and CAS apps. The path to retiring Shibboleth, ADFS or SSP without changing downstream applications.
An identity provider proxy that standardizes authentication across IdPs and legacy systems, with bilateral SAML integrations and an optional TOTP-based MFA add-on.
The company's first product. Lets institutions accept social and third-party sign-in - Google, Facebook, LinkedIn - for users outside the campus directory.
Sign-in for applicants, alumni and guests: guest accounts, account linking, sponsored invitations and Slate applicant sign-in extensions.
Administrative console with federation event logging, a log API and SIEM log streaming - the monitoring and compliance layer campuses need.
Cloud-hosted, highly available, with 24/365 production support. Priced by annual authentications, sold direct and via AWS Marketplace private offers.
Over 200 universities use Cirrus, alongside research organizations, non-profits and healthcare institutions. A sampling of the marquee names:
Dedra Chamberlin is Cirrus Identity's founder and CEO, and her path to it is not the usual one. Before software, her academic background was in city and regional planning and Latin American studies. She moved into university identity management and rose to Deputy Director of Identity and Access Management at UC Berkeley and UCSF, where she chaired the workgroup that crafted the University of California's system-wide identity strategy.
The origin story is refreshingly literal: she had spent years solving identity for one institution and decided she could either keep serving a single campus or build something that served many. She chose many. Cirrus is what a domain expert builds when she stops solving her own problem and starts solving everyone's version of it - which is also why the engineering and support staff are drawn from campus identity programs at Stanford, Duke, Michigan and Wisconsin.
Staff from UC Berkeley's CalNet identity program start a company to bring managed identity to many institutions at once.
The first product lets campuses accept social logins - Google, Facebook, LinkedIn - for external users.
An angel-backed seed round (roughly $350K-$460K total; investors have included Merian Ventures and Golden Seeds) funds growth.
Announces a partnership to improve Microsoft Entra ID integrations for higher education.
Publishes guidance on configuring the Enterprise Bridge for REFEDS Assurance and managing certificates across federated deployments.
"Enable Zero Trust in higher ed through a suite of Cirrus Works solutions."
"Cirrus" is a cloud type - a fitting name for a service that is, quite literally, cloud-hosted.
Roughly two dozen people sit in the authentication path of hundreds of thousands of students, faculty and alumni. That's leverage.
The most-cited reason to buy the Bridge is to remove software - retire Shibboleth - without breaking the apps that depend on it.
The founder's degrees are in city planning and Latin American studies, not computer science. Identity found her.
Product demos, webinars and talks live on the company's channels. Start with the Cirrus Identity product demos on YouTube, then dig into the deep-dives on the Federated Identity Management blog.
Oakland, California · 4031 Brighton Avenue · +1 510-710-1554
Profile compiled from public sources including the company website, LinkedIn, Crunchbase and press. Funding and headcount figures are approximate. Facts current as of mid-2026.
Cirrus Identity is an Oakland-based software company that runs managed, cloud-hosted identity and access management for higher education, research institutions, non-profits and healthcare. Founded in 2013 by former UC Berkeley identity staff, it acts as a proxy and bridge between commercial identity providers (Entra ID, Okta, Duo, Google) and the multilateral research-and-education federations - InCommon, eduGAIN, the Canadian Access Federation and GakuNin - that campuses depend on but that most commercial IdPs do not support. More than 200 universities use it to retire aging Shibboleth deployments, let alumni and applicants log in with social accounts, and standardize authentication without rebuilding every application.
Last updated: