Skip to content

feat: entitlement check#3969

Open
grutt wants to merge 1 commit into
mainfrom
feat--org-sso-gate
Open

feat: entitlement check#3969
grutt wants to merge 1 commit into
mainfrom
feat--org-sso-gate

Conversation

@grutt
Copy link
Copy Markdown
Contributor

@grutt grutt commented May 19, 2026

Description

Adds an entitlement check to configure SSO

Type of change

  • New feature (non-breaking change which adds functionality)

Copilot AI review requested due to automatic review settings May 19, 2026 19:58
@vercel
Copy link
Copy Markdown

vercel Bot commented May 19, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
hatchet-docs Ready Ready Preview, Comment May 19, 2026 8:00pm

Request Review

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds an organization-level entitlement gate to the SSO configuration UI so that SSO setup is only available when the control-plane indicates the org is entitled to use SSO.

Changes:

  • Introduces a new organizationEntitlementsGet control-plane endpoint client + TypeScript contract (OrganizationEntitlements).
  • Adds a new React Query call in the organization settings SSO tab to fetch entitlements and conditionally enable SSO queries/UI.
  • Updates the SSO tab UI to show a “contact us” message when the org is not entitled.

Reviewed changes

Copilot reviewed 2 out of 4 changed files in this pull request and generated 1 comment.

File Description
frontend/app/src/pages/main/v1/tenant-settings/organization/index.tsx Fetches org entitlements and gates SSO queries + renders either SSO config or an access message.
frontend/app/src/lib/api/organization-wrapper.ts Adds a React Query helper for fetching org entitlements via the control-plane API client.
frontend/app/src/lib/api/generated/control-plane/data-contracts.ts Adds the OrganizationEntitlements response type (canSSO).
frontend/app/src/lib/api/generated/control-plane/Api.ts Adds organizationEntitlementsGet API method to the generated control-plane client.

{organizationEntitlementsQuery.isLoading ? (
<div className="flex items-center justify-center py-8">
<Loading />
</div>
@promptless-for-oss
Copy link
Copy Markdown

📝 Documentation Update

I've updated the Enterprise SSO documentation to reflect this entitlement check.

Change: Added a note clarifying that Enterprise SSO is available on certain Hatchet Cloud plans, with a link for users to contact support to upgrade.

View suggestion

Copy link
Copy Markdown
Contributor

@igor-kupczynski igor-kupczynski left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The change makes sense to me, seems mostly mechanical and low risk. Copilot actually raised a good feedback, worth commenting if we are happy with that failure mode.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants