Enterprise setup
This feature is only available on the Enterprise plan.
This page describes the basic setup for a private instance of the Buf Schema Registry (BSR). Currently, this requires manual work and communication between Buf engineers and your organization.
Configure your DNS
Your BSR instance is hosted using a custom domain provided by you.
For example, if your domain is example.com, you might choose to use buf.example.com as your private BSR instance's domain name.
Once you've chosen a domain for your BSR instance, inform us of the name.
A Buf engineer will provide you with the value for your CNAME records.
The following examples use example-corp.enterprise.buf.build as a placeholder for this value.
Your private BSR instance is reachable from the public internet and is protected by SSO and CLI tokens. If your organization requires additional security measures such as IP range restriction, reach out to discuss.
Assign administrative users
Your private BSR instance provides special privileges for administrator accounts to configure and manage various aspects of the instance. At least one user needs to be promoted to registry admin—see Provisioning admin users for instructions.
Identity provider (IdP) setup
By default, your BSR instance uses the public BSR as the IdP, but you should set up your BSR instance to use your SSO as the IdP instead. Follow the setup instructions for your provider, and read the user lifecycle page to understand how Buf provisions users in the BSR. We recommend that users in your organization sign up with their organization email addresses, so that when you switch to SSO their accounts merge automatically.