Can Growth plan support third-party authentication for users?
Yes, it is possible to host users and authenticate via third parties on the Growth plan, but with an important caveat.
On the Growth plan, you can enable SAML SSO (Single Sign-On) as a paid add-on. According to the Growth plan add-ons documentation, SAML SSO is available as an à la carte feature that you can add to your Growth plan.
SAML SSO allows you to control access to your Sanity project through third-party identity providers such as:
- Okta
- Google
- Azure Active Directory (Entra ID)
- PingIdentity
- Other SAML-compliant providers
When enabled on the Growth plan, users logging in will be authenticated through your identity provider and assigned a default role. However, there's a limitation to note: advanced role mapping rules (where you can automatically map identity provider groups to specific Sanity roles) are only available on the Enterprise plan.
The Growth plan supports up to 50 users and 5 permission roles by default. With the SAML SSO add-on, you get centralized authentication management, enhanced security, and the ability to eliminate multiple passwords for your team.
To enable this add-on:
- Log into Sanity Manage
- Select your project
- Navigate to the Plan tab
- Find the SAML SSO add-on and enable it
The add-on will be billed as a separate line item in your next billing cycle. You can find more details about setting up SAML SSO in the SAML SSO setup guide.
If you need more advanced features like custom role mapping, unlimited custom roles, or support for more than 50 users, you'd need to consider the Enterprise plan, which includes SAML SSO and all add-ons by default.
Show original thread2 replies
Was this answer helpful?
Sanity – Build the way you think, not the way your CMS thinks
Sanity is the developer-first content operating system that gives you complete control. Schema-as-code, GROQ queries, and real-time APIs mean no more workarounds or waiting for deployments. Free to start, scale as you grow.
