- Required single sign-on
- Every member signs in through your identity provider. SSO sessions last 12 hours.
- Authorized Git credentials
- After signing in with SSO, members authorize their Git credentials for the organization. Credentials that skip this don't reach its repositories.
- Directory sync
- People join and leave the organization when they join and leave your directory. Groups stay in step too.
- Audit export and streaming
- Invites, membership, team and access changes go to the audit log. Export it, or stream events to your own destination.
Enterprise identity and audit
acme · SSO sessions last 12 hours
Audit log
ExportTeam plan controls come with Enterprise, and review rules apply to people and agents alike.
Role ceilings
Cap the highest role anyone can be given on a repository, and decide who may create repositories at all.Nested teams
Teams inside teams, with permissions inherited down the tree. Give a whole department read access in one step.Review rules on every repository
Required approvals, CODEOWNERS, required checks and merge queues. Approvals expire when new code is pushed.Agents inside the same rules
Agents act with the permissions of the person who runs them, and their Change Requests go through the same review rules.
Enterprise allowances, pooled across the organization.
10,000
Repositories
1,000 GiB
Pooled LFS storage
5,000
Searches by meaning per seat a month
150
Kairo questions per seat a day
$30 per member a month
Or $300 per member billed yearly. Coline workspaces add Enterprise governance for $18 per seat a month.
Identity provider connections and support terms are agreed with each customer. Read how we handle data on the security page.
Tell us about your team and what you need. We reply by email.