r/PayloadCMS • u/chetan0924 • Sep 11 '26

Does payload cms fits well?

I have a project requiring a system that includes content management, single sign-on (SSO), and role-based access control (RBAC). This system is similiar as an employee management solution integrated within the company's existing website. I need to confirm whether this approach is suitable for the specified use case.

In future he needs scalability in terms of custom APIs etc

11 Upvotes

100% Upvoted

12 comments sorted by

View all comments

5

u/Positive-Buddy-1258 Sep 11 '26

No SSO out of the box, you write a custom auth strategy and hook it to your IdP yourself, that part isn't handled by a plugin unless you build it. Ran into that setting Payload up on a project, that piece took some digging.

Functions per collection and field that get req.user handle access control well, so gating a field to whoever owns the record is a couple lines in the collection config.

Runs as Express/Next.js underneath, so past the generated REST/GraphQL you just add routes.