Vercel · Agent stack · Enterprise only
The maintenance app, the referral board and the new agent each built their own sign-in, and IT has to remember to remove leavers from all three. Passport puts every internal app on Vercel behind Okta, Entra ID or Auth0. The app learns who signed in and which groups they belong to. Passport is available on Vercel Enterprise plans only.
Salesforce consulting partner since 2010 · MVP Hall of Fame · 200+ agents in production · UAE, India and US desks
The problem
What Passport is
Facts from Vercel’s own pages, checked on 16 October 2026. The sources are at the end of this page.
How it works
Five steps. IT sets it up once. After that, every request reaches the app with the signed-in person attached.
Infographic
Step by step
Set up
Admin connects your company login
Your identity provider is registered once in Vercel Connect, then Passport is switched on for the project or team.
Open
Staff open the app
Anyone who is not signed in is sent to your company login page.
Sign in
Sign in with Okta or Entra ID
Vercel checks the answer from your provider and sets a session for that deployment.
Request
The app knows who they are
Each request carries a signed token with the person’s ID and groups. Vercel strips any copy sent by the browser.
Downstream
Salesforce sees the same person
With Connect, the app gets a Salesforce token for that person, so their own permissions apply.
How it fits together
Staff sign in with the company login they already have. Passport checks it before any internal app or agent loads. Through Connect, the same person reaches Salesforce with their own permissions.
Infographic
Use cases · worked examples
How Passport fits into the work of the industries we serve, one step at a time.
Example 1 · Property management, Dubai · Infographic
Today: Technicians share one login to the maintenance app. When a quote is approved, nobody can say which manager approved it.
After: The app sits behind the company’s Entra ID login. It reads each person’s group, so technicians log jobs and managers approve quotes, each under their own name.
Worked example, step by step
Every approval in Salesforce names the manager who gave it, and nobody shares a password.
Example 2 · Clinic group, Riyadh · Infographic
Today: The referral board has its own usernames. Doctors and the front desk see the same screens, and old accounts pile up.
After: The board sits behind Okta. Doctors and the front desk sign in with their usual login, and their Okta group decides which screen they see.
Worked example, step by step
One login for every internal tool, and each screen matches the person’s role.
Example 3 · Financial services, New York · Infographic
Today: Relationship managers want the new research agent. Compliance will not allow it on a link without the company login.
After: The agent sits behind the same Entra ID gate as the rest of the firm’s tools. A separate risk service checks the signed token before it answers.
Worked example, step by step
Compliance can see who signed in to the agent and when.
Is it for you
Good fit
Not for you yet
What Mindcat does
The assessment is free: a short read of the org and a written note. If you go ahead, the first build week is a fixed AED/SAR 14,900 (about USD 4,050), credited in full when you sign the build within 60 days. After go-live, we keep it patched, watched and changing every month.
FAQ
Sources
Checked against Vercel’s own pages on 16 October 2026. Vercel changes fast, so we check again before any plan we write for you.
Vercel is a product of Vercel Inc. Mindcat builds and runs work on it for clients; we are not affiliated with or endorsed by Vercel.
Start here
One or two lines is enough. You hear back within 24 hours from the person who signs the work.
