SSO — SAML & OIDC
Log your team in through your identity provider (Okta, Entra, Google, any OIDC/SAML IdP). An SSO sign-in provisions users straight into your organization.
Enterprise
SSO, SCIM & audit — on your own infrastructure.
Open Connector Enterprise adds the features security and IT teams require — SSO, SCIM directory sync, and long-term audit retention & export — unlocked by an offline license key on your self-hosted instance. The core broker stays open source (AGPL-3.0), and credentials never leave your environment.
What's in Enterprise
Enterprise identity & compliance, self-hosted.
SCIM directory sync
Provision and deprovision users automatically from your directory over SCIM 2.0 — joiners and leavers stay in sync without manual seat management.
Long-term audit retention & export
Keep the tamper-evident audit trail for as long as compliance requires and export it to your SIEM. The base trail is free in core; the EE layer adds retention + export.
Runs on your infrastructure
Every enterprise feature runs on your self-hosted instance, unlocked by an offline license key — no phone-home, air-gap friendly. Credentials never leave your environment.
FAQ
Enterprise, answered
- Does Open Connector support SSO (SAML / OIDC)?
- Yes. SSO is an enterprise feature (SAML and OIDC) you unlock with a license key on your self-hosted instance. An SSO sign-in provisions the user into your organization automatically.
- Does Open Connector support SCIM provisioning?
- Yes. SCIM 2.0 directory sync is an enterprise feature: provision and deprovision users automatically from your IdP (Okta, Entra, etc.), so access stays in sync with your directory.
- How are the enterprise features licensed?
- They live in the packages/ee-* workspaces, source-available under the Open Connector Commercial License, and unlock at runtime with an offline, Ed25519-signed license key. The core broker stays open source (AGPL-3.0) and free; only the EE layer needs a license.
- Can I run the enterprise features self-hosted?
- Yes — that's the model. The license key unlocks SSO, SCIM, and long-term audit retention on your own infrastructure with no hosted dependency, so your data and credentials stay in your environment.
Enterprise features, your infrastructure.
Self-host the open-source core for free, then unlock SSO, SCIM, and audit retention with a license key. No data leaves your environment.