PLATFORMS Signal 469
Enterprise Managed Users is now generally available
↗
Vercel’s Enterprise Managed Users feature is now generally available, letting organizations control Vercel accounts through their identity provider.
Centralizing authentication and lifecycle management reduces the risk of orphaned or unmanaged accounts and aligns Vercel access with existing corporate SSO policies. The shift to SAML-only sign-in forces teams to adopt their IdP for all work-related activity, simplifying compliance and audit trails. Engineers will need to provision SCIM integration and verify domains before the feature can be used, which adds upfront setup effort.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Account authentication and lifecycle are governed exclusively by the organization’s IdP via SAML SSO.
SCIM directory sync automatically creates, updates, and removes managed users to keep Vercel in step with the IdP.
Enabling EMU requires an Enterprise plan, an enforced SAML SSO configuration, active Directory Sync, and at least one verified domain.
THE READ
What the cluster adds up to.
Vercel has moved its Enterprise Managed Users capability from beta to general availability, giving companies full authority over Vercel accounts that belong to their verified domains. This replaces the previous model where individual users could own accounts independent of corporate control. The change centralizes identity management, making the organization’s IdP the definitive source for authentication and account status.
From an operational standpoint, managed accounts can now only authenticate through SAML SSO; all alternative login mechanisms such as email OTP, GitHub, Google, and GitLab are disabled for those accounts. Existing personal accounts on a newly managed domain are prompted to either attach a personal email for hobby work or be removed, ensuring that only SSO-authenticated identities remain. This forces teams to align their Vercel usage with corporate login standards, eliminating mixed-auth scenarios.
The feature introduces automatic provisioning via SCIM, which synchronizes user records between the IdP and Vercel, handling creation, updates, and deprovisioning without manual intervention. Profile attributes are also sourced from the IdP, removing the ability for individual users to modify them directly in Vercel. This reduces administrative overhead and helps maintain consistent user data across systems.
Adoption requires an Enterprise-level subscription, an active SAML SSO enforcement, a functioning Directory Sync setup, and at least one domain that has been verified with Vercel. Enabling the feature is done through the Security & Privacy section of Team Settings and can be rolled out to multiple teams in a single operation. The primary cost is the Enterprise plan itself and the engineering effort to configure SAML and SCIM integrations.
The managed user model only applies to accounts on verified company domains; any account outside that scope continues to operate under the standard personal account model. Personal accounts that lack activity or content are automatically archived, and their owners receive a managed account on their next SSO login. Teams on non-Enterprise plans, or those without a verified domain, will not benefit from these controls and must continue using the existing authentication options.
Written by elseif from the cluster below · checked for specifics the sources never containedTHE CLUSTER