Vercel Passport is generally available as of July 31, 2026. Read the changelog and complete guide for more information.

Enterprise teams can now control access to their Vercel deployments with Vercel Passport , using their own identity provider.

Visitors authenticate through providers like Okta, Auth0, or any compatible OIDC provider before they can view a protected deployment.

Use Passport to:

Reuse an OIDC application across multiple projects

Set a team default that applies to new projects automatically

Assign Passport to existing projects in bulk

After Passport authenticates a visitor, Vercel injects a signed JWT into the x-vercel-oidc-passport-token request header. Read it server-side to access the external_sub claim, the stable visitor identifier returned by your identity provider:

export async function GET ( request : Request ) {

const token = request . headers . get ( 'x-vercel-oidc-passport-token' ) ;

const payload = JSON . parse (

Buffer . from ( token ! .…