Edition Differences

OneAccess provides Basic, Professional, and Enterprise editions. Table 1 describes the features supported by each edition.

Basic: Provides basic functions with a quota of 100 or 500 users and supports yearly/monthly billing. It is suitable for small enterprises.
Professional: Provides advanced functions (access control, permissions management, and capacity expansion) in addition to basic ones. The number of users can be 200 or 1,000 to 10,000. It meets high cost-effectiveness and reliability requirements of government organizations and medium and large enterprises. Yearly/month billing is supported.
Enterprise: Provides independent resource deployment and advanced functions (access control and permissions management). It supports a maximum of 40,000 users and yearly/monthly billing, meeting the service requirements of large enterprises and governments.

**Table 1** Features
Feature	Basic	Professional	Enterprise
Capacity expansion	Supported	Supported	Not supported
Conditional access control	Not supported	Supported	Supported
Custom API access control	Not supported	Supported	Supported
Fine-grained permissions	Not supported	Supported	Supported
Identity synchronization	Not supported	Supported	Supported
CloudBridge agents	Not supported	Supported	Supported
Organizations and users	Supported	Supported	Supported
Custom user attributes	Supported	Supported	Supported
Authentication via OAuth 2.0, SAML, OIDC, CAS, plug-in autofill, or OpenAPI	Plug-in autofill and OpenAPI are not supported.	Supported	Supported
Identity sources (WeCom, DingTalk, Lark, AD, LDAP, XinRenXinShi, Beisen, MCHR, SAP SuccessFactors, and Weaver e-cology9.0)	Supported	Supported	Supported
Manual and automatic application authorization	Supported	Supported	Supported
Internal and custom APIs	Custom APIs are not supported.	Supported	Supported
Authentication provider	WeChat, Weibo, QQ, Alipay, DingTalk, WeLink, WeCom, Cloud Hub, Lark, eteams, AD, and LDAP	WeChat, Weibo, QQ, Alipay, DingTalk, WeLink, WeCom, Cloud Hub, Lark, eteams, SAML, OIDC, OAuth, CAS, AD, LDAP, Kerberos, and FIDO2	WeChat, Weibo, QQ, Alipay, DingTalk, WeLink, WeCom, Cloud Hub, Lark, eteams, SAML, OIDC, OAuth, CAS, AD, LDAP, Kerberos, and FIDO2
Regions	Not supported	Supported	Supported
Administrator permissions	Supported	Supported	Supported
Password policy	Supported	Supported	Supported
Audit	Supported	Supported	Supported
Enterprise information	Supported	Supported	Supported
SMS gateway	Supported	Supported	Supported
Email gateway	Supported	Supported	Supported
DingTalk gateway	Supported	Supported	Supported
Voice gateway	Supported	Supported	Supported
Dictionaries	Supported	Supported	Supported
Data import	Supported	Supported	Supported
Entire parameter settings	Supported	Supported	Supported
Built-in and custom UI templates	Supported	Supported	Supported
Service configuration	Supported	Supported	Supported