Mention the Enterprise Commercial License wherever a Cloud plan gates a feature (#1023)

* docs: mention the Enterprise Commercial License wherever a Cloud plan gates a feature Cloud-plan and cloud-only notes now also name the self-hosted Enterprise Commercial License for IdP sync, EDR/MDM, peer approval and MFA. The Zero Trust guide, Plans and billing and Self-hosted vs Cloud gain self-hosted equivalents. SSO notes state that OIDC IdPs work in both self-hosted editions. The license page's feature table adds peer approval, audit event streaming and notifications. * docs: drop the MFA license claim; self-hosted MFA covers local users only * docs: state that an Enterprise proof of concept includes every licensed feature
2026-10-09 15:19:04 +02:00 · 2026-10-06 15:53:32 +02:00
parent 084ff2462c
commit 7d1ca1d635
15 changed files with 24 additions and 6 deletions
@@ -50,14 +50,14 @@ some additional features that are targeted at business customers and help with n

 - **[Users and groups provisioning](/manage/team/idp-sync)** from your identity provider (IdP).
 - **[Traffic events logging](/manage/activity/traffic-events-logging)** of connections to internal resources for audit and analysis.
- **[Event streaming](/manage/activity/event-streaming)** to 3rd party platforms and SIEM systems (also available in self-hosted deployments with an [enterprise license](/selfhosted/enterprise)).
+- **[Event streaming](/manage/activity/event-streaming)** to 3rd party platforms and SIEM systems.
 - **[Integrations with EDR](/manage/access-control/endpoint-detection-and-response)** like CrowdStrike and others.
 - **[Peer approval](/manage/peers/approve-peers)** to join the network.
 - **[User invites](/manage/team/add-users-to-your-network#direct-user-invites)**.
 - **[MSP functionality](/manage/for-partners/msp-portal)** for managing multiple tenant networks from a single account.

 <Note>
-SCIM provisioning and some enterprise features require a [Commercial License](https://netbird.io/pricing#on-prem) for self-hosted deployments.
+Users and groups provisioning (including SCIM), traffic events logging, event streaming, EDR integrations, and peer approval are also available in self-hosted deployments with an [Enterprise Commercial License](/selfhosted/enterprise). The MSP functionality is available only in NetBird Cloud.
 </Note>

 ## Geo Distributed Relay Servers
@@ -28,7 +28,7 @@ NetBird doesn't apply the MDM and EDR checks to all devices in the network. Inst
 the checks to apply.

 <Note>
-     This feature is only available in the cloud version of NetBird.
+     This feature is available in NetBird Cloud on the [Business plan](https://netbird.io/pricing) and in self-hosted deployments with an [Enterprise Commercial License](/selfhosted/enterprise). The open source Community Edition does not include it.
 </Note>

 ## Supported EDR Platforms
@@ -8,7 +8,7 @@ When enabled, devices connect to the management service without network access t
 Administrators then can assess whether the peer is eligible to join the network.

 <Note>
-    This feature is only available in the [NetBird cloud](https://app.netbird.io/) version.
+    This feature is available in [NetBird Cloud](https://app.netbird.io/) on the [Business plan](https://netbird.io/pricing) and in self-hosted deployments with an [Enterprise Commercial License](/selfhosted/enterprise). The open source Community Edition does not include it.
 </Note>
 ## Related Video Content

@@ -11,6 +11,10 @@ It features peer-to-peer connections and encryption, access control, routing, an

 - **Business Plan:** At **€12 per user per month**, the Business Plan offers enhanced network security with a Zero Trust approach. It supports unlimited users and includes features like device approvals and integrations (MDM and EDR) for comprehensive control, device posture checks and activity events streaming, making it an excellent choice for organizations seeking advanced security solutions.

+<Note>
+    These plans apply to NetBird Cloud. If you self-host NetBird, the paid features (such as IdP provisioning, device approvals, MDM and EDR integrations, traffic events logging, and event streaming) come from an [Enterprise Commercial License](/selfhosted/enterprise) instead. See the [on-prem pricing page](https://netbird.io/pricing#on-prem).
+</Note>
+

 <p>
    <img src="/docs-static/img/manage/settings/pricing-overview.png" alt="pricing-overview" className="imagewrapper-big"/>
@@ -20,7 +20,7 @@ or update network configurations like [DNS](/manage/dns#distribution-groups),
 eliminating the need for manual grouping.

 <Note>
-    This feature is only available in the cloud version of NetBird in the [Team plan](https://netbird.io/pricing) and above.
+    This feature is available in NetBird Cloud on the [Team plan](https://netbird.io/pricing) and above, and in self-hosted deployments with an [Enterprise Commercial License](/selfhosted/enterprise). The open source Community Edition does not include it.
 </Note>

 This video guide walks you through an example integration with Microsoft Entra ID, covering both user onboarding and
@@ -7,6 +7,7 @@ You can use Authentik as your Identity Provider with NetBird, but it will requir
 <Note>
    Support for OIDC-compliant IdPs is available on the Team plan and higher.
    The Free plan supports Google, Microsoft, and social logins.
+    Self-hosted deployments support OIDC-compliant IdPs in both the open source Community Edition and the [Enterprise Commercial License](/selfhosted/enterprise). See [self-hosted identity providers](/selfhosted/identity-providers).
 </Note>

 1. You need to create a new Application and Provider.
@@ -7,6 +7,7 @@ You can use [AWS Cognito](https://aws.amazon.com/cognito/) as your Identity Prov
 <Note>
    Support for OIDC-compliant IdPs is available on the Team plan and higher.
    The Free plan supports Google, Microsoft, and social logins.
+    Self-hosted deployments support OIDC-compliant IdPs in both the open source Community Edition and the [Enterprise Commercial License](/selfhosted/enterprise). See [self-hosted identity providers](/selfhosted/identity-providers).
 </Note>

 ## Prerequisites
@@ -7,6 +7,7 @@ You can use [cidaas](https://www.cidaas.com/) as your Identity Provider with Net
 <Note>
    Support for OIDC-compliant IdPs is available on the Team plan and higher.
    The Free plan supports Google, Microsoft, and social logins.
+    Self-hosted deployments support OIDC-compliant IdPs in both the open source Community Edition and the [Enterprise Commercial License](/selfhosted/enterprise). See [self-hosted identity providers](/selfhosted/identity-providers).
 </Note>

 ## Step 1: Create a New Application
@@ -7,6 +7,7 @@ You can use Duo Security as your Identity Provider with NetBird, but it will req
 <Note>
    Support for OIDC-compliant IdPs is available on the Team plan and higher.
    The Free plan supports Google, Microsoft, and social logins.
+    Self-hosted deployments support OIDC-compliant IdPs in both the open source Community Edition and the [Enterprise Commercial License](/selfhosted/enterprise). See [self-hosted identity providers](/selfhosted/identity-providers).
 </Note>

 ## Prerequisites
@@ -9,6 +9,7 @@ NetBird integrates with IIJ ID as a custom OpenID Connect application.
 <Note>
    Support for OIDC-compliant IdPs is available on the Team plan and higher.
    The Free plan supports Google, Microsoft, and social logins.
+    Self-hosted deployments support OIDC-compliant IdPs in both the open source Community Edition and the [Enterprise Commercial License](/selfhosted/enterprise). See [self-hosted identity providers](/selfhosted/identity-providers).
 </Note>

 ## Step 1: Create a Custom OpenID Connect Application
@@ -44,6 +44,7 @@ to integrate with NetBird. Below are the steps to set up different OIDC-complian
 <Note>
    Support for OIDC-compliant IdPs is available on the Team plan and higher.
    The Free plan supports Google, Microsoft, and social logins.
+    Self-hosted deployments support OIDC-compliant IdPs in both the open source Community Edition and the [Enterprise Commercial License](/selfhosted/enterprise). See [self-hosted identity providers](/selfhosted/identity-providers).
 </Note>

 ### Authentik
@@ -7,6 +7,7 @@ You can use Zitadel as your Identity Provider with NetBird, but it will require
 <Note>
    Support for OIDC-compliant IdPs is available on the Team plan and higher.
    The Free plan supports Google, Microsoft, and social logins.
+    Self-hosted deployments support OIDC-compliant IdPs in both the open source Community Edition and the [Enterprise Commercial License](/selfhosted/enterprise). See [self-hosted identity providers](/selfhosted/identity-providers).
 </Note>

 ## Step 1: Create a New Project (Optional)
@@ -9,6 +9,7 @@ NetBird integrates with Zoho as a custom OIDC application.
 <Note>
    Support for OIDC-compliant IdPs is available on the Team plan and higher.
    The Free plan supports Google, Microsoft, and social logins.
+    Self-hosted deployments support OIDC-compliant IdPs in both the open source Community Edition and the [Enterprise Commercial License](/selfhosted/enterprise). See [self-hosted identity providers](/selfhosted/identity-providers).
 </Note>

 ## Step 1: Create a Custom OIDC Application
@@ -33,6 +33,8 @@ The core connectivity, access control, and routing features are the same in the
 | SCIM user and group provisioning | No | Yes |
 | EDR and MDM integrations (CrowdStrike, SentinelOne, Intune, and others) | No | Yes |
 | Traffic-flow event logging and streaming | No | Yes |
+| Peer approval | No | Yes |
+| Audit event streaming and notifications | No | Yes |
 | Support | Community (Slack, GitHub) | Standard support included |

 ## Frequently asked questions
@@ -73,7 +75,7 @@ To serve multiple isolated customers you have two options:

 You can start evaluating today for free: the **open source Community Edition is free to self-host for as long as you like**, with no license and no time limit. That is the right way to try core NetBird (the control plane, peers, policies, and routing) while you decide whether it fits.

-To evaluate the commercial-only features (active-active HA, SCIM, traffic-flow logging), contact the sales team through the [on-prem pricing page](https://netbird.io/pricing#on-prem) to run an assisted proof of concept with the commercial license. You install and run the stack; NetBird provides the license and guidance. A commercial proof of concept runs for 30 days by default.
+To evaluate the commercial-only features, contact the sales team through the [on-prem pricing page](https://netbird.io/pricing#on-prem) to run an assisted proof of concept with the commercial license. A proof of concept includes every feature of the commercial license, including everything marked commercial in the table above. You install and run the stack; NetBird provides the license and guidance. A commercial proof of concept runs for 30 days by default.

 ### What does the server share with the NetBird license service?

@@ -15,6 +15,10 @@ Before you start planning or changing policies, confirm the basics.

 This guide uses features from both the **Team** and **Business** plans. Check that your deployment includes what you need.

+<Note>
+    Team and Business are NetBird Cloud plans. On a self-hosted deployment, IdP user and group provisioning, traffic events logging, and event streaming require an [Enterprise Commercial License](/selfhosted/enterprise). Audit event logging and posture checks are included in the open source Community Edition.
+</Note>
+
 **Team plan**

 - **[User and group provisioning from IdP (Identity Provider)](/manage/team/idp-sync)** for automatic group sync