Who gets SSO
SSO is Enterprise only.Sign-in on Team and Community
Team signs in through WorkOS AuthKit with email and password, Google or Microsoft. Community is designed to sign in through the OIDC identity provider its operator configures at install, which is not Enterprise SSO. The self-host stack does not include the Nitsor application, so a Community deployment has no Nitsor dashboard or sign-in today. See Self-host Community.Set up SSO
Nitsor works with your administrators during Enterprise onboarding to set up the SAML or OIDC connection through WorkOS. People from your organization then sign in through that identity provider.What stays the same
SSO controls how people sign in. Account roles and project rungs still control their authority in Nitsor. Agent credentials are separate from SSO and keep their own scopes and expiry. See Roles and provenance.How to start
Contact sales to arrange Enterprise SSO. See Plans and billing for the plan comparison.| Plans | Enterprise |
|---|---|
| Last verified | 2026-09-27 |