docs / deployment / simezu-integration

Simezu integration

How to switch Soriku from local mode to Simezu-backed multi-tenant mode with SSO and billing.

Prerequisites

Configure Soriku

export SORIKU_AUTH_MODE=simezu
export SIMEZU_BASE_URL=https://simezu.com
export SIMEZU_APP_ID=app_xxx
export SIMEZU_APP_API_KEY=...
export SIMEZU_APP_API_TOKEN=...
export SORIKU_BASE_URL=https://soriku.your-domain
export SORIKU_ALLOWED_ORIGINS=https://soriku.your-domain
python server.py

SSO flow

User clicks Sign in on Soriku → redirected to Simezu → authenticates → redirected back with a token. Soriku exchanges the token for tenant context (org, role, plan). All subsequent API calls carry the bearer token and are scoped to that tenant.

Billing

Subscription state comes from Simezu via webhooks. Soriku reflects the plan in its rate limits and feature gates (e.g. Pro adds Soriku Cloud, Team adds shared agents). You don't need Stripe credentials on the Soriku side unless you want direct billing.

Tenant isolation

Every workspace has its own subset of agents, keystore, capability map, and routing logs. No cross-tenant leakage by design: queries always include a tenant filter at the database layer.

How this maps to EU AI Act compliance →