From version 9.0.0 on, LDAP and SAML require a plan that includes the corresponding Premium module. Both methods keep working on all plans today, but workspaces without a covering license will not be able to authenticate users through them after upgrading to 9.0.0.
Rocket.Chat provides robust identity and access management features. This guide compares the authentication options available across different Rocket.Chat plans.
LDAP / AD
Use LDAP/AD to synchronize user data, map roles and groups, and manage advanced features such as background sync and auto-logout.
Feature | Community | Starter | Premium (Commercial, Government, Defense) |
|---|---|---|---|
Login Fallback | ✓ | ✓ | ✓ |
Merge with existing Rocket.Chat users | ✓ | ✓ | ✓ |
Filter what LDAP users can log in (Search Filter and Group Filter) | ✓ | ✓ | ✓ |
Encryptions | ✓ | ✓ | ✓ |
Basic User Data and Avatar Sync | ✓ | ✓ | ✓ |
Load Custom User Data from LDAP | x | ✓ | ✓ |
Roles Mapping from Groups | x | ✓ | ✓ |
Sync LDAP Groups to Channels | x | ✓ | ✓ |
Sync Teams with LDAP | x | ✓ | ✓ |
Sync User Active State | x | ✓ | ✓ |
Auto logout deactivated users | x | ✓ | ✓ |
Periodic Background Sync | x | ✓ | ✓ |
SAML
Create role mapping from user groups by selecting the field you want to sync with Rocket.Chat.
Feature | Community | Starter | Premium (Commercial, Government, Defense) |
|---|---|---|---|
Basic Synchronization | ✓ | ✓ | ✓ |
Customizable User Interface | ✓ | ✓ | ✓ |
Roles mapping | x | ✓ | ✓ |
Fields mapping | x | ✓ | ✓ |
Advanced SAML Settings | x | ✓ | ✓ |
OAuth / Custom OAuth
Allow users to log in via Facebook, Google, LinkedIn, GitHub, and other third-party applications.
Feature | Community | Starter | Premium (Commercial, Government, Defense) |
|---|---|---|---|
Basic Social Logins | ✓ | ✓ | ✓ |
Login via Custom OAuth protocol using a unique identifier | ✓ | ✓ | ✓ |
Load Name, Username and Email from Custom OAuth | ✓ | ✓ | ✓ |
Import Avatar from Custom OAuth | ✓ | ✓ | ✓ |
Assign Rocket.Chat roles based on Custom OAuth roles | x | ✓ | ✓ |
Join channels automatically based on Custom OAuth roles | x | ✓ | ✓ |
For more details, see the Authentication and Identity Management FAQ. The following sections provide step-by-step guidance on configuring each feature.