What's New in OpenHands Enterprise: Super Admin, Identity Providers, and Smarter Automations

Written by
Joe Pelletier
Published on
As OpenHands Enterprise moves from a handful of early adopters to the system teams rely on every day, the questions administrators ask are changing. They want to know who can sign in and how, what is running in the background, how much it costs, and how to keep the platform patched as the underlying components change.
Over the last month, we shipped five OpenHands Enterprise releases (0.71.1 through 0.90.1) with new capabilities for managing users and identity providers, governing automations, controlling spend, and connecting to the systems your developers already use.
Here are the highlights:
A Super Admin dashboard for your whole installation (Beta)
OpenHands Enterprise now includes a Super Admin dashboard at /super-admin that lets instance Super Admins manage users, organizations, and membership across the entire installation.
From the dashboard, Super Admins can see members across every organization, mint sign-up links, reset a user's password, and see pending invitations alongside existing users.
The dashboard is in Beta, and you can turn turn it on with Experimental > Enable Super Admin Dashboard in the Admin Console.
A smoother first-time setup for new installs
Getting a new OpenHands Enterprise installation from "it's running" to "my team is using it" is now much faster. When the Super Admin dashboard is enabled, the first Super Admin on a new install is walked through a guided setup so you can get started in minutes.
-
Choose your LLM. On a first install, the LLM provider picker filters as you type, and the Verified providers section is now populated even when LiteLLM is turned off. If your install has no default LLM, OpenHands Enterprise no longer creates an empty Default profile.
-
Connect Git Providers and use Automation Templates. Select your Git provider, connect integrations, and jumpstart a software factory with an Automation Template like Issue to PR or Code Review.
-
Invite your team. Mint sign-up links, invite people with a role picker, and see pending invitations alongside existing users in one place.
Manage identity providers from one place
OpenHands Enterprise now supports a Keycloak-less authentication option we’re calling “V2”, currently in Beta. You can enable this option under Experimental > Enable OAuth V2 Login in the Admin Console. With V2, Super Admins can configure authentication providers directly within the Super Admin UI, without requiring an app restart or a heavy Keycloak dependency.
-
Create and edit providers in the UI. Start from a preset picker, then fine-tune each auth provider on its own edit page.
-
Switch identity providers without losing your users. Match existing users by email during a one-time identity provider swap-over, so people keep their history and settings.
-
SAML and OIDC support. SAML providers now support SP-initiated login and publish SP metadata, making setup with your identity team simpler.
-
GitHub, GitLab, and Bitbucket sign-in. Login providers for all three come pre-seeded, so you can get started from the sign-in options your developers already use.
-
Flexible login URLs. Link directly to a specific identity provider or provider type.
Better support for Azure DevOps
If your organization builds on Azure DevOps, OpenHands Enterprise now works the way you would expect. Repositories are listed and searched across every organization, and sandboxes can clone Azure DevOps repositories directly.
Azure DevOps is also a built-in event source for Automations, so pull request and work item events can trigger your workflows. Service Hook problems are now shown to admins instead of being hidden.
More governance for Automations
Automations are becoming the background workflows of the agentic SDLC, and these releases give administrators and teams more control over them.
-
Automatically disable automations that keep failing. Admins can now set thresholds in the Automations section of the Admin Console so that an automation is disabled after repeated failures.
-
Keep finished sandboxes around for follow-up. By default, a run's sandbox is deleted as soon as the run finishes. Admins can now set a delay so a finished run's sandbox stays paused for a while, which keeps its conversation resumable if someone wants to pick up where the automation left off.
-
Visibility and sharing. Organization members can read automation conversations, and each run links directly to its Agent Canvas conversation.
-
Easier to find and understand. Filter the automations list by creator, and add descriptions to automations so teammates know what each one does.
-
More reliable runs. Sandboxes that fail to provision are retried and cleaned up, and custom webhook deliveries are no longer processed twice.
Clearer, more dependable budgets
Budget management got a thorough pass, starting with the 0.71.1 release and continuing through 0.90.1.
-
Spend you can trust. Spend is preserved when you change the reset day mid-cycle, the spend cycle rolls once per period, and unread member spend is no longer reported as zero.
-
See what you have left. Your Budget now shows the effective remaining budget, and the usage chart shows each day's spend with per-model details on hover.
-
Alerts that arrive. Failed budget alert deliveries are retried, and Slack alert settings now persist.
-
Clearer settings. Updated terminology, clearer labels, and save confirmations make it easier to understand what a budget change will do.
A more reliable day-to-day experience
Alongside the larger features, we shipped a long list of fixes that make everyday use more dependable:
-
Hung LLM streams now time out instead of stalling, and conversations keep running when an MCP server fails to start.
-
Context condensation no longer drops the system prompt.
-
Deleting a conversation is now a soft delete, which keeps the record in the database.
-
The Jira Cloud and Slack integrations now show their connection status.
-
The bundled LiteLLM proxy no longer retries rate limits and handles zero-cost models correctly.
Building the control plane for the agentic SDLC
As coding agents become shared, always-on infrastructure, organizations need more than capable agents. They need to control who can sign in and how, see what is running, manage spend, and keep the platform secure and up to date.
These releases continue to expand OpenHands Enterprise as the control plane for organizations building and operating an agentic SDLC.
Ready to scale agent workflows across your organization? Request a demo to learn how OpenHands gives your team centralized control over automations, access, and usage.
Get useful insights in our blog
Insights and updates from the OpenHands team
Sign up for our newsletter for updates, events, and community insights.

