One console for the whole suite,
users, migration and security.
Run the whole suite from one console: Google Workspace and Microsoft 365 migration, advanced LDAP and SSO, org chart, groups, SCIM/HRIS provisioning, security, audit and quotas, sovereign, hosted on your infrastructure.
From Google and Microsoft, without losing data
Import mail, drive, calendar and contacts from Google Workspace or Microsoft 365, track each job and switch MX when everything is ready.
Google Workspace and Microsoft 365
User OAuth, Google DWD or Microsoft app-only, chosen per project.
Invites and roster
Invite by email or CSV import, pre-provision the roster and SSO aliases.
Job tracking and audit
Progress per service, retry failures and CSV/NDJSON export per user.
Guided MX cutover
DNS pre-check (TXT, MX, SPF/DKIM/DMARC) then delta-mode cutover.
Advanced LDAP & SSO, your access rules
OAuth, SAML and LDAP/Active Directory with bind, StartTLS, attribute mapping, group sync and domain restrictions.
LDAP / Active Directory
Bind DN, StartTLS, search filters, user and AD group sync.
OAuth, SAML & OIDC
Google, Microsoft Entra, Okta or a custom provider via Authentik.
Access restrictions
Email domains, identities and organizations allowed per provider.
Groups and provisioning
Default Authentik groups and LDAP account synchronization.
Org units, org chart and groups
Hierarchy, manager links, user groups and directory sync from LDAP or SCIM.
Organizational units
Tree of departments, teams and subsidiaries, edited or synced.
Interactive org chart
Hierarchy view with managers, roles and team attachments.
User groups
Teams, departments and externals, the base for Drive shares and AI permissions.
Directory sync
Manual or automatic refresh from LDAP/SCIM to the local ultid mirror.
Your HRIS feeds the directory in real time
Your HRIS pushes to Authentik (SCIM 2.0). UltiSuite syncs the local mirror, org units, org chart and groups.
SCIM 2.0 standard
Lucca, Workday, PayFit, SAP SuccessFactors, any SCIM-compatible HRIS.
Attribute mapping
Manager, department, job title and employee ID mapped to the UltiSuite org chart.
OU strategy
Automatic org units from HRIS attributes.
Contacts directory
Enriched contact cards fed by company provisioning.
Roles, groups and bulk actions
Full directory, fine roles and groups to drive permissions at scale.
Admin / user / guest roles
Assign the right access and suspend an account in one click.
User groups
Teams, departments and externals, the base for shares and permissions.
Bulk actions
Invite, role, quota or add to a group on a selection.
User profile
Individual quotas, AI caps and status from each profile.
Storage quotas and per-user AI cost caps
Storage quotas, AI cost caps and alert thresholds applied by default, adjustable per account.
Mail, Drive and Photos storage
Default quotas for the organization, override per user.
AI cost caps
Daily and monthly limits per user on org keys.
Search and automations
Web search, API tokens and webhooks capped per account.
Overview and alerts
Storage used, accounts near quota and recent activity.
Strict policies, auditable traceability
2FA/WebAuthn, file policies, external shares, mail reports and an exportable audit log for your compliance needs.
2FA & WebAuthn
Required second factor (everyone or admins), TOTP and security keys.
File and sharing policies
Uploads, extensions, antivirus, public Drive links and access audit.
Audit log
Every admin action recorded, CSV/NDJSON export.
Reports and phishing
Mail reporting workflow, bulk actions and traceability.
Your current platforms, migrated and federated
Migrate data from existing suites and keep federating identity through SSO: one account, several sources.
Google Workspace
Gmail, Drive, Calendar, Contacts
Personal
User OAuth migration: each person links their Google account and starts the import.
Enterprise
Google domain-wide delegation (service account) to migrate the whole org, plus ongoing OAuth SSO.
Microsoft 365
Outlook, OneDrive, Calendar
Personal
OAuth migration: import mail, files and the Microsoft 365 calendar.
Enterprise
Microsoft app-only (client credentials) with admin consent, plus Entra ID SAML SSO.
Okta
SAML and OIDC SSO
Personal
SAML login so members authenticate with their Okta credentials.
Enterprise
SAML/OIDC federation and group provisioning for the whole organization.
Active Directory
LDAP and Azure AD / Entra
Personal
LDAP authentication against your internal directory, with no new account base.
Enterprise
AD user and group sync over secured LDAP (StartTLS).
Migration without downtime
Delta mode and gradual MX cutover; users keep their data.
Federated identity
One Ulti account linked to your SSO providers, with multiple aliases accepted.
Open standards
OAuth, SAML, LDAP, IMAP, CalDAV/CardDAV, no proprietary lock-in.
Hosted on your side
Data and identities hosted on your sovereign infrastructure.
Linked apps in one click
Add business apps in one click. Login and security handled by the console.
- 1-click deploy from the console
- Same login on every app
Connected to suite apps
Administration integrates natively with other UltiSuite apps, same identity, contacts and storage.
Mail
Ultimail
Hosted mail domains, SMTP relay for notifications and MX cutover.
Files
UltiDrive
Upload policies, external sharing, antivirus and organization mounts.
AI assistant
UltiAI
Organization LLM providers, MCP tool groups and cost caps.
Contacts
Contacts
Organization directory fed by LDAP/SCIM and the org chart.
Enterprise offer
UltiSuite Enterprise
Sovereign SaaS, on-premise, assisted migration and dedicated support.
E2EE encryption
Zero Trust
Client vault for mail, drive, docs, chat, calendar and contacts, team policies.
Try it free, 10 GB included
All 10 apps are in every plan. Export your data if it is not a fit.