Vercel Passport is now generally available

Vercel Passport, which lets teams protect deployments with their own identity provider, is now generally available. Visitors sign in through Okta, Microsoft Entra ID, or any OIDC provider before reaching a protected deployment, and Vercel forwards a signed identity token so application code can read who the visitor is.

• The getIdentity() helper in the new @vercel/passport package reads the verified visitor identity from the request context, returning a subject (a stable ID scoped to the team and Connect application) and an externalSubject (the visitor's ID at the provider). It returns null only when there's no Passport session, since unauthenticated visitors are redirected to the identity provider first. In local development it returns a configurable development identity instead.
• Requesting the groups scope and allowlisting the claim in the Connect application lets application code authorize requests based on the visitor's group membership from the identity provider.
• verifyIdentity(), available in @vercel/passport 1.0.0 and later, lets a downstream service verify a forwarded Passport token, checking its signature, claims, and that it came from the expected project and environment. Services outside JavaScript can verify the same token as a standard JWT against the published JWKS.
• Every successful sign-in logs a passport-access-granted event in the Activity Log and Audit Logs, recording the visitor, hostname, and project.
• Protection Bypass for Automation now covers Passport, so webhooks, cron jobs, and CI runs that send a bypass secret keep working with Passport turned on, and Trusted Sources can bypass it without a shared secret using short-lived OIDC tokens.
• Passport now also supports custom environments, so environments like staging or qa get the same identity provider sign-in as preview and production.

Vercel Passport is available on the Enterprise plan. Full details are in the announcement.

Vercel

The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.

View Vercel →

Read the original announcement →