Vercel Passport is now generally available
Vercel Passport GA: identity layer for deployments now ships with group claims, token forwarding, and automation bypass.
Why it matters
Vercel's identity middleware moves from beta to production, letting enterprises gate deployments behind their own identity providers (Okta, Entra, OIDC) with verifiable tokens that downstream services can consume. Practitioners deploying multi-environment apps with compliance needs can now enforce authentication in the platform layer, not the app layer.
The key facts
20 to knowVercel Passport generally available on Enterprise plans
Supports Okta, Microsoft Entra ID, any OIDC provider
getIdentity() helper in @vercel/passport reads authenticated visitor from request context
Signed x-vercel-oidc-passport-token forwarded to application code
Identity claims (group membership, etc.) readable from payload
verifyIdentity() in @vercel/passport 1.0.0+ validates token signature and claims in downstream services
JWT verification via published JWKS for non-JavaScript services
Activity Log and Audit Logs track passport-access-granted events
Protection Bypass for Automation via x-vercel-protection-bypass header or query parameter
Trusted Sources feature: accepts short-lived OIDC tokens from authorized services without shared secret
Custom environment support (staging, qa, etc.) with same identity provider sign-in
Local development mode with configurable development identity for testing
Vercel Passport now generally available (Enterprise plan)
Supports Okta, Microsoft Entra ID, and any OIDC provider
getIdentity() helper reads verified identity in application code
Supports custom environment protection (staging, qa, custom)
Group membership claims now available from identity providers
Token verification available via @vercel/passport 1.0.0+ and standard JWT/JWKS
Passport Bypass for Automation supports Trusted Sources (short-lived OIDC tokens)
Local development mode supports configurable development identity
Go to the source
Vercel Blogvercel.com
Publisher excerpt: is now generally available.Vercel Passport Passport allows you to protect your Vercel deployments with your own identity provider. Visitors authenticate through Okta, Microsoft Entra ID, or any OIDC provider before viewing a protected deployment, and Vercel forwards a signed identity token to the…