Enterprise

An enterprise user has an EnterpriseSettings record — branding, SSO, and an API key — managed on /enterprise and under /api/enterprise.

Branding

Field
companyName	Display name shown in the UI and on generated documents
customLogoUrl	Full URL to the org logo
brandColor	Hex accent color (default #4F46E5)

SSO configuration

ssoProvider is one of OKTA, AZURE_AD, GOOGLE, SAML, or NONE, with an ssoLoginUrl for the provider's login endpoint. This is a record on the settings surface, not a redeploy — an enterprise admin points HridaSign at their identity provider from the console.

Endpoint
GET /api/enterprise/settings · PUT /api/enterprise/settings	Read / update branding and SSO
POST /api/enterprise/plan/upgrade	Move to an enterprise plan

API key

POST /api/enterprise/api-key issues a key for programmatic access. Only a SHA-256 hash is stored (apiKeyHash); the raw key is shown once at creation, and a short prefix (sk_live_XXXX…) is kept for display so an admin can tell which key is which. DELETE /api/enterprise/api-key revokes it.