Enterprise Managed Users is now generally available
By Steven Van ·
Enterprise Managed Users (EMU) gives organizations full control over the Vercel accounts tied to their verified domains.
Enterprise Managed Users is now generally available on Vercel, giving organizations full control over accounts tied to their verified domains. Instead of individuals owning their Vercel accounts, the organization's identity provider becomes the single source of truth for authentication and account lifecycle.
- Managed users sign in through SAML SSO only; email OTP, GitHub, Google, and GitLab logins no longer work for managed accounts.
- Directory Sync provisions accounts via SCIM, automatically creating, updating, and deprovisioning managed users to stay in sync with the IdP.
- Profile settings are managed through the IdP rather than by the individual.
- Teams can turn EMU on for a verified domain in Team Settings under Security & Privacy, and extend it to multiple eligible teams in one step.
EMU requires an Enterprise plan with enforced SAML SSO, active Directory Sync, and at least one verified domain. Two related features remain in beta and available on request: a Hobby team transition that guides members with a personal account on a newly managed domain to either add a personal email and keep their hobby projects or delete the account, and automatic conversion, which archives empty personal accounts and moves their owners into a managed account at their next SSO sign-in. Organizations can request access through their account team.
