Procurement one-pager. Self-hosted AI agent runtime with identity federation (OIDC + SAML). Core stays Apache 2.0; SSO ships as a commercial overlay.
| Item | Detail |
|---|---|
| SSO / OIDC | Authorization Code + PKCE; Okta, Azure AD, Google Workspace, Keycloak, Auth0 |
| SSO / SAML 2.0 | Signed assertions; AD FS, Okta, OneLogin and similar IdPs |
| Sessions | HttpOnly Secure cookies; server-side revocation; scoped API key auto-provisioned on login |
| RBAC | Org-aware roles (viewer / executor / admin); IdP group mapping |
| Delivery | Private overlay repo; build with go build -tags enterprise onto open-core VaultRun |
| Hosting | Runs on your infrastructure — no VaultRun SaaS dependency |
| Use | Terms |
|---|---|
| Development / test / evaluation | Free under the VaultRun Enterprise License |
| Production SSO | Commercial subscription or written agreement required |
| Managed service / hosting for third parties | Not permitted without a written commercial agreement |
| Pricing | Custom quote — no public price list yet; contact for a proposal |
1. Evaluate — request repo access for a PoC (dev/test free).
2. License — send org, IdP, instance count / seats, and timeline for a production quote.
3. Talk / schedule — procurement, support, or a walkthrough. All paths email mail@030.dev.