Enterprise readiness
Objective — Sell to teams that require SSO, audit logs, and a compliance story — without breaking vendor update safety.
Assessment 👤
Section titled “Assessment 👤”- Document gaps vs typical enterprise RFP (SSO, RBAC, data residency, SLA, DPA).
- Prioritize blockers vs nice-to-have; estimate eng weeks honestly.
SSO implementation 💻
Section titled “SSO implementation 💻”- Prefer SAML/OIDC via Laravel Socialite or dedicated package in ZajModule — not vendor auth controllers.
- IdP metadata configured per environment
- JIT provisioning or SCIM documented
- Fallback local admin break-glass account
Compliance & RBAC
Section titled “Compliance & RBAC”- SOC2: map controls to what you already have (backups, access logs, change management via Git).
- Admin RBAC: separate SuperAdmin, tenant admin, support — align with three-tier admin.
Enterprise sales 🔀
Section titled “Enterprise sales 🔀”- Security questionnaire template + standard DPA.
- Pilot → paid annual with success criteria in writing.