# Vercel Passport is now generally available

By Steven Van · 2026-07-31

Vercel Passport is now generally available. Passport allows you to protect your Vercel deployments with your own identity provider.

[Vercel](<https://creatorstoolbox.com/tools/vercel>) Passport, which lets teams protect deployments with their own identity provider, is now generally available. Visitors sign in through Okta, Microsoft Entra ID, or any OIDC provider before reaching a protected deployment, and Vercel forwards a signed identity token so application code can read who the visitor is.

- The getIdentity() helper in the new @vercel/passport package reads the verified visitor identity from the request context, returning a **subject** (a stable ID scoped to the team and Connect application) and an **externalSubject** (the visitor's ID at the provider). It returns null only when there's no Passport session, since unauthenticated visitors are redirected to the identity provider first. In local development it returns a configurable development identity instead.

- Requesting the **groups** scope and allowlisting the claim in the Connect application lets application code authorize requests based on the visitor's group membership from the identity provider.

- verifyIdentity(), available in @vercel/passport 1.0.0 and later, lets a downstream service verify a forwarded Passport token, checking its signature, claims, and that it came from the expected project and environment. Services outside JavaScript can verify the same token as a standard JWT against the published JWKS.

- Every successful sign-in logs a **passport-access-granted** event in the Activity Log and Audit Logs, recording the visitor, hostname, and project.

- Protection Bypass for Automation now covers Passport, so webhooks, cron jobs, and CI runs that send a bypass secret keep working with Passport turned on, and Trusted Sources can bypass it without a shared secret using short-lived OIDC tokens.

- Passport now also supports custom environments, so environments like staging or qa get the same identity provider sign-in as preview and production.

Vercel Passport is available on the **Enterprise** plan. Full details are in the [announcement](<https://vercel.com/changelog/vercel-passport-generally-available>).

[![](<https://assets.vercel.com/image/upload/contentful/image/e5382hct74si/hdEhWWkFyg5YxfXk7bu75/e434bb88cfba9fefd21b4e8c574502a3/passport-ga-og.jpg>)](<https://vercel.com/changelog/vercel-passport-generally-available>)

![Vercel](<https://www.google.com/s2/favicons?domain=vercel.com&sz=128>)

Vercel

The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.

[View Vercel →](<https://creatorstoolbox.com/tools/vercel>)

Sources

[Original source](<https://vercel.com/changelog/vercel-passport-generally-available>)

[Read Vercel Passport is now generally available on Creators Toolbox](<https://creatorstoolbox.com/blog/vercel-vercel-passport-is-now-generally-available>)

---
Canonical source: https://creatorstoolbox.com/blog/vercel-vercel-passport-is-now-generally-available