Authentication Across Plans

Rocket.Chat offers robust identity management features across various plans. This guide outlines the identity management features available across different Rocket.Chat plans.

LDAP / AD

Leverage advanced settings such as background sync, roles mapping from groups, auto-logout, and advanced user data sync with LDAP in your workspace.

Feature	Community	Starter	Pro	Enterprise
Login Fallback	✓	✓	✓	✓
Merge with existing Rocket.Chat users	✓	✓	✓	✓
Filter what LDAP users can log in (Search Filter and Group Filter)	✓	✓	✓	✓
Encryptions	✓	✓	✓	✓
Basic User Data and Avatar Sync	✓	✓	✓	✓
Load Custom User Data from LDAP	x	✓	✓	✓
Roles Mapping from Groups	x	✓	✓	✓
Sync LDAP Groups to Channels	x	✓	✓	✓
Sync Teams with LDAP	x	✓	✓	✓
Sync User Active State	x	✓	✓	✓
Auto logout deactivated users	x	✓	✓	✓
Periodic Background Sync	x	✓	✓	✓

SAML

Create role mapping from user groups by selecting the field you want to sync with Rocket.Chat.

Feature	Community	Starter	Pro	Enterprise
Basic Synchronization	✓	✓	✓	✓
Customizable User Interface	✓	✓	✓	✓
Roles mapping	x	✓	✓	✓
Fields mapping	x	✓	✓	✓
Advanced SAML Settings	x	✓	✓	✓

OAuth / Custom OAuth

Allow your users to log in via Facebook, Google, LinkedIn, GitHub, and other third-party applications.

Feature	Community	Starter	Pro	Enterprise
Basic Social Logins	✓	✓	✓	✓
Login via Custom OAuth protocol using a unique identifier	✓	✓	✓	✓
Load Name, Username and Email from Custom OAuth	✓	✓	✓	✓
Import Avatar from Custom OAuth	✓	✓	✓	✓
Assign Rocket.Chat roles based on Custom OAuth roles	x	✓	✓	✓
Join channels automatically based on Custom OAuth roles	x	✓	✓	✓

Explore the Identity Management FAQ to address common queries and gain a better understanding of identity management in Rocket.Chat. In the following sections, we will delve into each of these features in detail.