“### 1. Zulip — best value for managed hosting”
“### 1. Zulip — best value for managed hosting”
“- SAML SSO with Okta, OneLogin, Microsoft Entra ID and Keycloak.”
“This is a particularly interesting option because you don't need to purchase its Enterprise plan just to get SAML and OIDC.”
“- Plus costs $10/user/month annually, or $12 monthly, with a 10-user minimum.”
“### 2. Mattermost — best for self-hosting and control”
“### 2. Mattermost — best for self-hosting and control”
“- SAML 2.0 is supported on Entry and higher plans.”
“- Can be self-hosted, giving you greater control over deployment and data.”
“One important qualification: Mattermost's documentation distinguishes OAuth 2.0 from its OpenID Connect provider, and generic OAuth isn't necessarily supported as an authentication provider.”
“### 3. Rocket.Chat — worth considering for smaller teams”
“- Supports SAML, OAuth 2.0 and OpenID Connect.”
“- Its Starter plan and premium plans support advanced identity management.”
“- Community workspaces have lost SAML and custom OAuth support starting with version 9.0.”
“### 4. Slack — familiar, but expensive for SAML”
“### 4. Slack — familiar, but expensive for SAML”
“So Slack does support both approaches, but you need Business+ for conventional SAML SSO.”
“### 4. Slack — familiar, but expensive for SAML”
“So Slack does support both approaches, but you need Business+ for conventional SAML SSO.”