Skip to main content
🛠 This page is for engineering teams self-hosting their own Lightdash instance. If you want to learn about enterprise features and pricing, go to lightdash.com/pricing.
Enterprise license keys unlock advanced Lightdash Enterprise Edition features on self-hosted instances — SSO, SCIM, AI agents, embedding, custom roles, service accounts, results caching, pre-aggregates, and more.

​
Getting an enterprise license key

To obtain an enterprise license key for your self-hosted Lightdash instance:
  1. Contact our team — schedule a call with our enterprise team to discuss your requirements.
  2. Receive your license key — the Lightdash team will share a unique license key with you (typically via 1Password).

​
Configuring your license key

Set the license key on every Lightdash container (backend, scheduler, and workers) via the LIGHTDASH_LICENSE_KEY environment variable.

​
License validation and network requirements

On server start, Lightdash validates your enterprise license key by making an outbound HTTPS request to the Keygen license validation API:
  • Endpoint: https://api.keygen.sh
  • Purpose: validates the license key provided via the LIGHTDASH_LICENSE_KEY environment variable
  • When: on every Lightdash server start
Your Lightdash instance must be able to reach https://api.keygen.sh on server start. This is the only external network request required to run Lightdash with enterprise features. If your environment restricts outbound traffic, allowlist this endpoint in your firewall or proxy.If you enable the optional organization roadmap, your backend also makes outbound requests to https://roadmap.lightdash.com — allowlist that domain too.
No external code is pulled during this process — the request solely validates your license key and returns the validation result.

​
Verifying your license

After configuring your license key and restarting Lightdash, you can verify that enterprise features are enabled by:
  1. Logging in as an admin user.
  2. Navigating to Settings → Organization.
  3. Checking for the Enterprise Edition badge.

​
Enterprise features

A valid enterprise license key unlocks the features below. Most features are gated behind an additional environment variable that you must set to true before the feature becomes active. Follow each feature’s documentation link for the full list of configuration options.

​
Feature flags

Set these on your Lightdash instance in addition to LIGHTDASH_LICENSE_KEY:

​
Enterprise SSO providers

SSO providers such as Google Workspace are available on all plans. The following SSO providers require an enterprise license key on self-hosted instances. Configure them via environment variables — see Configure SSO for self-hosted Lightdash for the full setup guide, and the SSO env var reference for all options. Additional SSO-related options:
  • AUTH_DISABLE_PASSWORD_AUTHENTICATION=true — recommended for enterprise deployments to force SSO-only sign-in.
  • AUTH_ENABLE_GROUP_SYNC=true — sync groups from the IdP to Lightdash groups.
  • AUTH_ENABLE_OIDC_TO_EMAIL_LINKING=true — required when using SCIM alongside SSO so SSO sign-ins link to SCIM-provisioned users.
You can search “enterprise” on the environment variables reference to see every variable that requires an enterprise license key.

​
Troubleshooting

If enterprise features are not available after configuring your license key:
  1. Verify LIGHTDASH_LICENSE_KEY is set on every Lightdash container (backend, scheduler, workers).
  2. Ensure Lightdash has been restarted after adding the license key.
  3. Confirm the corresponding feature flag environment variable is set (for example, AI_COPILOT_ENABLED=true for the AI Analyst).
  4. Confirm your server can reach https://api.keygen.sh (required for license validation).
  5. Check the Lightdash logs for any license-related error messages.
  6. Contact our enterprise support team for assistance.