NewSingle sign-on and team access

Enterprise event ticketing
your IT team will sign off on.

Single sign-on with your identity provider, access limited to the events each person runs, an API for your own systems, and invoices for buyers whose employer pays. The code is open source, and all of it is included.

Single sign-on is switched on by request. Everything else on this page is in every account.

Who it's for

For teams that run a lot of events, with a lot of people

Corporate events teams

Customer conferences, partner summits and internal events, run by people who sign in with the company account.

Conference ticketing ›

Universities and colleges

Each department or society as its own organizer, with staff limited to their own events and finance kept to the finance office.

Associations and member bodies

An annual conference, regional events and training days, with invoices and bank transfer for members whose employer pays.

Agenda and speakers ›

Agencies

Every client as a separate organizer with its own branding and Stripe account, and client staff who can see their event and nothing else.

Identity

Sign in with the company account

Connect Okta, Microsoft Entra ID, Google Workspace or any OpenID Connect provider, verify your email domain, and choose whether everyone on it must use single sign-on. Once it is required, someone switched off in your identity provider can't sign back in.

  • Once SSO is required, nobody can sign up separately with an email on your domain
  • New people added on first sign-in, with the role you choose
  • Exempt a contractor or a service account, one person at a time
  • The owner keeps a break-glass sign-in, and admins hear when it is used
Ask for single sign-on ›
Setting up single sign-on in Hi.Events, choosing between Okta, Microsoft Entra ID, Google Workspace and another OIDC provider.
Access

Everyone sees what they need. Nothing else.

Give each person a role and decide what it covers: the whole account, one organizer and all of its events, or a single event. Finance can see revenue without editing an event, and the venue team can see attendees without seeing a single price.

  • Admin, Organizer and view-only Viewer roles
  • Revenue, reports and payouts hidden unless someone needs them
  • Refunds given to the people you choose
  • Two-factor sign-in required for the whole account, in one switch
How team access works ›
The Team page in Hi.Events, with Admin, Organizer and Viewer members and their access.
Integrations

Your systems, kept in step

A REST API for your CRM, badge printing or finance system, with an interactive reference inside the app. Keys are read-only or read and write, act with the access of the person who made them, and can be set to expire. Webhooks push orders, refunds and check-ins to you as they happen.

  • Events, products, orders, attendees, check-in and reports
  • Keys can't touch the team, payouts or security settings
  • Signed webhook deliveries, with a log of the most recent ones
API keys and the reference ›
API keys in Hi.Events settings, with read-only and read and write keys for a CRM and a badge printer.
Finance

Paperwork your finance team expects

Invoices with your numbering, business details and tax number on every order. Bank transfer for buyers who can't pay by card. VAT or sales tax inside the price or added at checkout. And the money goes into your own Stripe account as tickets sell, not into ours.

Many brands

One account, every department

Each department, brand or client gets its own organizer, with its own public page, branding, payouts and event defaults. Give people access to their organizer and they see its events, including the ones created next year.

For the review

What your IT team will ask about

Identity

  • Okta, Microsoft Entra ID, Google Workspace or any OIDC provider
  • Verified email domains, rechecked daily
  • SSO required, with exemptions per person
  • New people added on first sign-in, with a default role
  • Session length from 1 hour to 7 days
  • Owner break-glass access, with every admin alerted

Access

  • Admin, Organizer and Viewer roles
  • Whole account, or specific organizers and events
  • Financials hidden from people who don't need them
  • Refund rights given separately
  • Team access on each event and organizer
  • The owner alerted when an admin is added

Integrations

  • REST API with an OpenAPI reference
  • Read-only or read and write keys
  • Keys that expire, with a reminder first
  • Signed webhooks for orders, attendees and check-ins
  • Spreadsheet exports of attendees and answers
  • Sales events from the widget for your analytics

Security

  • Two-factor sign-in, required for everyone if you like
  • Recovery codes and 30-day trusted devices
  • Email alerts for new keys and security changes
  • Card-testing protection at checkout
  • Open source code anyone can read
  • Payments in your own Stripe account
Straight answers

What Hi.Events doesn't do yet

Better you hear it here than halfway through a security review.

SAML
Single sign-on uses OpenID Connect. Okta, Entra ID and Google Workspace all support it, and so do most other identity providers.
SCIM provisioning
People are added the first time they sign in through SSO, with the role you choose. To remove someone, deactivate them on the Team page.
Custom domains
Event pages live on hi.events. To sell on your own domain, embed the ticket, lineup or schedule widget on your site.
FAQ

Enterprise ticketing, answered

How do we get single sign-on?
Email [email protected] and we will switch it on for your account. An admin then opens Settings, General, Single sign-on, picks your identity provider, connects it, runs a test sign-in and verifies your email domain with a DNS record. You decide whether everyone on that domain must use it.Ask for single sign-on →Single sign-on help →
Which identity providers work?
Okta, Microsoft Entra ID and Google Workspace have step-by-step setup in the app. Any other OpenID Connect provider works too, such as Keycloak, Authentik, Zitadel or OneLogin. SAML is not supported.
What if our identity provider goes down?
The account owner can always sign in with their password and two-factor authentication, even when SSO is required, and every admin gets an email when they do. That keeps you in control of the account without leaving a back door open.
Can we give a contractor or a venue access to one event only?
Yes. Invite them with access to specific organizers or events instead of the whole account. A Viewer can see that event's orders and attendees and change nothing; an Organizer can run it. Turn off "Can see financials" and they won't see revenue, order totals or reports.Managing your team →
Can our CRM or finance system pull the data?
Yes. Create an API key in Settings, read-only if that is all the system needs, and it can read events, orders, attendees and registration answers through the REST API. A key acts with the role and access of the person who made it, can be set to expire, and can't touch the team, payouts or security settings. Webhooks push new orders, refunds and check-ins to you as they happen.API keys →Webhooks →
Can delegates pay by invoice?
Yes. Turn on invoicing and every order gets a PDF invoice with your numbering, business details and tax number. Turn on offline payment and buyers can choose bank transfer and follow the instructions you write. Tickets are issued at once and the order stays awaiting payment until you mark it as paid.Invoices →Offline payments →
What does it cost?
Nothing. Hi.Events is free for organizers: the booking fee is paid by ticket buyers at checkout. There is no monthly fee, no seat licence and no contract, and card payments settle into your own Stripe account.
Can we read the code or run it ourselves?
Yes. Hi.Events is open source, and the code that runs Cloud is public on GitHub, so your security team can read it. If your data has to stay on your own servers, you can self-host it. Company single sign-on, the box office and reserved seating need a paid licence there, and removing the Hi.Events branding is a licence add-on; Google, Microsoft or your own OpenID Connect sign-in, team access and the API are free.Source code on GitHub →Self-hosting licences →
We have a security questionnaire. Who do we send it to?
Send it to [email protected] with a few lines about your events, and we will come back to you.Email us →

Bring Hi.Events to your team

Tell us how many events you run and who needs access, and we'll get single sign-on set up with you.

Free for organizers, with no monthly fee, seat licence or contract.