SSOGEN and Microsoft Entra ID compared

Microsoft Entra ID is Microsoft's cloud identity service, and the sign-in behind Microsoft 365. SSOGEN is an identity provider whose Web Agent runs inside your existing Apache or Oracle HTTP Server, with SSH, RDP and VNC to servers as browser sessions. The table shows how each reaches Oracle E-Business Suite, PeopleSoft, JD Edwards and internal servers.

Request a Quote

Side by side

	Microsoft Entra ID	SSOGEN
Where it runs	Microsoft’s cloud service; connectors run in your network	Your own Enterprise Linux servers, or hosted by SSOGEN, from the same release
Internal web applications	Application Proxy, with a private network connector on Windows Server that makes outbound connections only; Microsoft documents several single sign-on modes for published applications	The SSOGEN Gateway with App Proxy on Linux, and an Outbound Connector for networks that accept nothing inbound
Oracle E-Business Suite, PeopleSoft, JD Edwards	Microsoft Learn documents several routes: Oracle Access Manager or Oracle Identity Cloud Service in front of E-Business Suite, and partner gateways such as F5 BIG-IP and Datawiza	The Web Agent inside your existing Apache or Oracle HTTP Server, with packages that generate the web-tier configuration
SSH and RDP to servers	Global Secure Access with Private Access, a network tunnel that needs a client on the device	Remote Access: SSH, RDP and VNC as browser sessions through the Gateway, with stored accounts the person never sees
Phone app	Microsoft Authenticator	SSOGEN Authenticator, with number matching that cannot be switched off
Access decisions	Conditional Access policies, with risk-based options	Readable policies with a What if screen; no AI model in the decision

Entra facts come from Microsoft’s own public pages on Microsoft Learn: Application Proxy, its connectors and its single sign-on options, Private Access, and the E-Business Suite tutorials. Check them for your own license.

Where Entra ID is strong

Microsoft 365 and Windows. It is the sign-in for Microsoft 365, and it ties in with Windows sign-in.
Outbound-only connectors. Application Proxy connectors have long reached internal applications without an inbound firewall rule.
A very large application gallery of pre-integrated SaaS applications.

Where SSOGEN differs

No Windows server for the connector, and nothing extra in front of Oracle applications. The Web Agent runs inside Apache and Oracle HTTP Server. The Gateway runs on Enterprise Linux.
Oracle-specific packages. E-Business Suite 12.1 and 12.2, PeopleSoft and JD Edwards packages generate the web-tier configuration and hand the application the user in the form it already reads. The E-Business Suite package sets the EBS sign-in profile options for you.
Browser sessions to servers, not a network tunnel. A person reaches one approved server in a browser tab. There is no client to install and no network access to manage.
In the Microsoft Entra application gallery. SSOGEN is listed there: in the Entra admin center, open Enterprise applications, choose New application and search for SSOGEN. People sign in through Entra ID as they do for any other gallery application.
Self-hosted when you need it. All of SSOGEN can run on your servers, with your database, your signing keys and your audit trail.

How a move from Entra ID works

Applications move to SSOGEN one at a time. During the move, Entra ID stays an upstream SAML or OpenID Connect sign-in source.

The steps are on the Microsoft Entra ID sign-in source page and on each application page, starting with Oracle EBS single sign-on. For a move one application at a time, see the migration playbooks.

Microsoft, Microsoft 365, Microsoft Entra ID and Microsoft Authenticator are trademarks of the Microsoft group of companies. Oracle, E-Business Suite, PeopleSoft and JD Edwards are trademarks of Oracle and its affiliates. F5 and BIG-IP are trademarks of F5, Inc. SSOGEN is an Oracle partner, but Oracle has not reviewed or endorsed this page. SSOGEN is not affiliated with Microsoft or F5. Competitor details are from their public pages and may change; check them for your own license.