# Pomerium Enterprise

Pomerium Enterprise is built on our open-source Pomerium Core offering. Pomerium Enterprise makes Pomerium easier to manage at scale, and adds additional functionality aimed at organizations with auditing, compliance, governance, and risk management needs.

## Pomerium Enterprise Features

Pomerium Enterprise comes with all the capabilities in Pomerium Core, plus the following features:

### Enterprise Console

The **Enterprise Console** provides a dashboard where you can view traffic and logs, manage routes and policies, import external data, configure global and namespaced settings, and more.

\[An overview animation of the Pomerium Enterprise Console]

### Enterprise API

The **Enterprise API** helps you manage your configuration with your preferred programming language or infrastructure management tool.

Everything that is manageable in the Enterprise Console can also be driven programmatically through the [Enterprise API](https://www.pomerium.com/docs/internals/management-api-enterprise.md).

### Session Management

The **Sessions** dashboard allows you to view and manage sessions within your organization. Admin members can export session data and revoke sessions in real time.

\[View and manage sessions in the Enterprise Console's Sessions dashboard]

Ready to upgrade to Pomerium Enterprise? [**Contact us**](https://www.pomerium.com/enterprise-sales/) today to get started.

### Namespaces and Self-Service

The **Namespaces** dashboard is where you configure user roles and permissions for routes, policies, and the Enterprise Console itself. Once you've configured a [Namespace](https://www.pomerium.com/docs/internals/namespacing.md), members of that namespace can self-manage access to the infrastructure they build from or depend on.

Pomerium Enterprise allows you to import groups defined by your identity provider. This allows you to build stable policies that don't require adjustments as your company changes.

\[Manage Namespaces in the Enterprise Console's Namespaces dashboard]

### Clusters

In the **Namespaces** dashboard you can also add [**Clusters**](https://www.pomerium.com/docs/internals/clusters-for-enterprise.md) — independent installations of [Pomerium Core](https://www.pomerium.com/docs/deploy/core.md), each with their own set of routes, certificates, and policies.

\[Add Cluster]

### Deployment History and Audit Logs

The **Deployments** dashboard allows you to view and export change logs from the Enterprise Console. Select a change to review which user applied it and when.

\[View deployments in the Enterprise Console's Deployments dashboard]

### Directory Sync

Pomerium Enterprise's [**Directory Sync**](https://www.pomerium.com/docs/integrations/user-standing/directory-sync.md) feature allows you to import your identity provider's directory data. After a successful sync, you can use your internal groups and teams data when building policies. \[Viewing the Identity Providers settings for a directory sync in the Enterprise Console]

### External Data Sources

In the **External Data** dashboard, you can import, view, and manage [external data sources](https://www.pomerium.com/docs/capabilities/integrations.md). After a successful sync, you can use data unique to your organization to serve as context in your authorization policies. \[Using the External Data Source Record type in a policy]

## Pomerium Enterprise features comparison

| Features | Pomerium Core | Pomerium Enterprise |
| :-- | :-- | :-- |
| Identity-based Access | \[Pomerium checkmark] | \[Pomerium checkmark] |
| SSO Support | \[Pomerium checkmark] | \[Pomerium checkmark] |
| Declarative Authorization Policy | \[Pomerium checkmark] | \[Pomerium checkmark] |
| TCP Support | \[Pomerium checkmark] | \[Pomerium checkmark] |
| Enterprise Console | <ClearIcon /> | \[Pomerium checkmark] |
| [Enterprise API](https://www.pomerium.com/docs/internals/management-api-enterprise.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [Session Management](https://www.pomerium.com/docs/internals/metrics.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [Namespaces](https://www.pomerium.com/docs/internals/namespacing.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [Directory Sync](https://www.pomerium.com/docs/integrations/user-standing/directory-sync.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [User Impersonation](https://www.pomerium.com/docs/capabilities/impersonation.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [Deployment History](https://www.pomerium.com/docs/internals/metrics.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [Device Identity](https://www.pomerium.com/docs/integrations/device-context/device-identity.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [Custom Branding](https://www.pomerium.com/docs/capabilities/branding.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [Service Accounts](https://www.pomerium.com/docs/capabilities/service-accounts.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [Metrics](https://www.pomerium.com/docs/internals/metrics.md) | <ClearIcon /> | \[Pomerium checkmark] |
| [External Data Sources](https://www.pomerium.com/docs/capabilities/integrations.md) | <ClearIcon /> | \[Pomerium checkmark] |

## Next Steps

Already upgraded to Pomerium Enterprise, but need some help setting up the Enterprise Console?

The following docs can help:

- [**Install Pomerium Enterprise**](https://www.pomerium.com/docs/deploy/enterprise/install.md)
- [**Pomerium Enterprise Configuration**](https://www.pomerium.com/docs/deploy/enterprise/configure.md)
- [**Pomerium Enterprise Quickstart**](https://www.pomerium.com/docs/deploy/enterprise/quickstart.md)