Does SAML Shield validate signatures?

No—SAML Shield does not perform cryptographic signature validation. Instead, it focuses on structural and protocol-level validation to catch malformed assertions, protocol abuse, and known attack patterns before they reach your service provider.

You should continue relying on your SAML library or identity provider for signature verification. SAML Shield is designed to complement, not replace, signature validation by enforcing strict protocol checks at the edge.

What happens if I surpass the usage included for free?

There are zero hard caps or pricing cliffs. If you surpass the 500 included responses, you'll pay for only what you use at the rates outlined above.

Why should I trust Stytch with my SAML Responses?

Stytch services are designed, developed, monitored, and updated with security at our core to protect you and your customers’ data and privacy.

In addition to holding ourselves to the highest level of infrastructure, service level, and personnel security requirements, we also build best-in-class security into the products we offer customers.

What is Stytch’s uptime and status?

You can follow Stytch’s uptime and status here. We have over 99.999% monthly uptime figures, and we also provide service level agreements for contracted customers.

Do you provide any special offers for startups?

Yes! We can offer great deals for startups—SAML Shield is free until your Series A or 3 years of incorporation, whichever comes first. Learn more.