SATOSA is a configurable proxy for translating between different
authentication protocols such as SAML2, OpenID Connect, and OAuth2.
It implements the Access Protocol Translation layer of [the
Authentication and Authorization for Research Collaborations (AARC)
Blueprint Architecture](https://aarc-project.eu/architecture/), and it
is the foundation of several spoke-hub-style identity federations.
Adopters include research institutions, higher education, and
governments.