Agent sign-in
Single sign-on is part of Enterprise, at $49 per agent per month. Connect ZChat to your identity provider over OpenID Connect or SAML 2.0 and agents sign in with their work account. Accounts are matched by email address.
Administrators can always sign in with their password, so an identity provider outage never locks you out. This page describes the ASP.NET Core edition of ZChat 2.0.6; the separate Web Forms package does not include the 2.0.5 or 2.0.6 additions.
Enter the issuer URL, client ID and secret, check the discovery document from the form, and map the email, login and display name claims.
Download ZChat's service provider metadata, and import your identity provider's metadata instead of copying certificates by hand.
Limit sign-in to allowed email domains, create agent accounts on first sign-in with a default role, and require SSO for agents.
Protocol, provider details, claim mapping and account rules are on one page.
Agents see a Sign in with button; administrators can still use a password.
New in 2.0.6
Single sign-on is part of Enterprise, at $49 per agent per month.
The Windows desktop app shows the same “Sign in with” button as the browser. When single sign-on is required, it says so, and administrators can still use their password.
Single sign-on in the desktop app needs the server to run 2.0.6. Against an older server the app does not offer it.
Single sign-on settings can be changed only by an administrator who is signed in, never through an API access token.
The desktop app on a server where single sign-on is required for agents.
Any identity provider that speaks OpenID Connect or SAML 2.0, such as Microsoft Entra ID, Okta, Google, Keycloak or ADFS.
The single sign-on button is hidden and every agent signs in with a password. The settings stay stored and come back when you renew.
Enterprise, at 49 dollars per agent per month. It is not part of Community or Premium.
No. Administrators can always sign in with their password, even when single sign-on is required for agents.
Not if you turn on just-in-time accounts. The first sign-in creates the agent with the role you choose. Otherwise an administrator adds each agent first, with the same email address.
Single sign-on is part of Enterprise at $49 per agent per month. Live chat stays free with unlimited agents.
ZChat gives you the installable server, web dashboard, website widget, and desktop agent tools in one self-hosted product, with live chat free to run. Run it on infrastructure you trust and connect AI only if and how you want it.
Deployment
Install on Windows or Linux, behind IIS or Nginx, in a VM, or in Docker if that fits your stack.
Commercial model
Live chat is free with unlimited agents. Only the optional AI assistant is billed, per agent per month.
AI Flexibility
Use Ollama locally or connect OpenAI and Anthropic with your own provider accounts.