Directus SSO: Free on Self-Hosted, $499/mo on Cloud
Single Sign-On in Directus is built-in and free for self-hosted instances. Directus Cloud charges $499/mo minimum (Team tier) to unlock SSO features. Learn why self-hosted wins, and how Opsily managed hosting removes the maintenance burden.
Why Choose Self-Hosted Directus SSO with Opsily?
Cut costs, keep control, and maintain compliance without managing servers.
Stop Paying $499/mo for SSO
Directus Cloud charges $499/mo minimum (Team tier) just to access SSO. Self-hosted Directus SSO is completely free and built-in. Opsily managed hosting adds enterprise-grade monitoring, backups, and SSL—at a fraction of Cloud pricing. All 4 auth drivers work on self-hosted with no per-seat fees or tier restrictions.
Your Data, Your Rules
Self-hosted Directus stays on your infrastructure or Opsily's EU servers. Full GDPR compliance with data residency control. No vendor lock-in. Migrate anytime. SOC 2 Type II certified for enterprise security audits. Every team member gets unlimited SSO access—no seat limits.
4 Auth Drivers. One Setup.
Configure OpenID Connect for corporate identity providers (Okta, Azure, Google, Keycloak). Deploy OAuth 2.0 for social/consumer apps (GitHub, Facebook, Discord). Use SAML for enterprise XML-based auth (AWS IAM, Google Workspace). Integrate LDAP with Active Directory for on-premise identity. All drivers work seamlessly. Multi-provider setup supported.
Built for teams who need reliability
How Directus SSO Setup Works
Four steps from decision to live authentication.
Choose Your App
Select an app to get started.
Choose Your SSO Driver
Directus supports OpenID Connect, OAuth 2.0, SAML, and LDAP. Pick the one your team already uses: Okta or Azure for OpenID, GitHub or Twitter for OAuth 2.0, AWS IAM or Google Workspace for SAML, Active Directory for LDAP.
Configure Provider Credentials
Set AUTH_PROVIDERS environment variables with your provider's client ID and secret. Map user groups to Directus roles (optional). Enable public registration for first-time SSO logins. All configuration is code—no vendor dashboard required.
Deploy on Opsily
Click Install on Directus in the Opsily app catalog. Opsily provisions PostgreSQL, manages backups, renews SSL certificates, and handles updates. One-click setup with zero server maintenance.
Go Live with SSO
Your Directus Studio now shows your SSO provider on the login screen. Users authenticate without Directus passwords. Optional: enable Seamless SSO to hide the Directus login page entirely if users are already authenticated to your provider.
Self-Hosted Directus vs. Directus Cloud Tiers
Directus Cloud pricing as of July 2026. Enterprise pricing is custom; SSO unavailable on Core tier.
Directus Hosting Built for Teams
All Opsily plans include automated backups, SSL, and EU data residency. SSO is included on every plan—no per-seat fees or tiers to unlock.
Loading pricing...
Enterprise-Grade Security & Compliance
Your Directus SSO setup is protected by the same standards large organizations rely on.
SOC 2 Type II Certified
Independent audit confirms security, availability, and confidentiality controls are in place and effective.
GDPR Compliant
EU data residency, encryption at rest and in transit, audit logging for compliance readiness.
TLS 1.2+ Encryption
All data encrypted in transit. Automatic certificate renewal. Zero downtime SSL provisioning.
24/7 Monitoring
Automated alerts, uptime tracking, and incident response. Real-time anomaly detection.
Role-Based Access Control
Map external auth provider groups to Directus roles. Enforce permissions at the database level. Audit all access.
Frequently Asked Questions
Directus supports four SSO drivers: OpenID Connect (recommended for Okta, Azure, Google, Keycloak), OAuth 2.0 (GitHub, Facebook, Discord, custom apps), SAML (AWS IAM, Google Workspace, enterprise XML auth), and LDAP (Active Directory, on-premise identity servers). All four are built-in and free on self-hosted instances. You can enable multiple drivers at once and let users pick their preferred authentication method from the login screen.
Deploy Directus with Built-In SSO Today
Skip the Cloud paywall. Get self-hosted Directus with free SSO, managed infrastructure, and zero vendor lock-in.