Summary
On July 31, 2026, Vercel made Passport generally available. Passport puts every deployment behind a team's existing identity provider - Okta, Microsoft Entra ID, Auth0, or any OIDC-compatible IdP - so visitors must authenticate before they can view a protected deployment, priced at $100 per project per month with no cap on external users.
What changed
Vercel Passport moved from public beta to general availability. It applies identity-provider authentication at the front door of a deployment, integrating with Okta, Microsoft Entra ID, Auth0, and generic OIDC providers, and lets teams protect preview and production deployments without building custom auth.
Why it matters
Deployment-level SSO enforcement is a core enterprise requirement, and shipping it as a managed GA feature lets platform teams keep pre-production and internal apps off the open internet using the same IdP they already run. It also rounds out Vercel's enterprise identity story alongside its OIDC federation for workloads.
Evidence excerpt
Vercel Passport gates every deployment behind the team's identity provider by default - Okta, Microsoft Entra, Auth0, or any OIDC-compatible IdP. Passport is $100 per project per month with no limit on external users that can access a protected deployment.