Newsletter
Join the Community
Subscribe to our newsletter for the latest news and updates
Open-source Next.js boilerplate for enterprise SaaS apps with SAML SSO, audit logs, webhooks, and Stripe billing.
The BoxyHQ Enterprise SaaS Starter Kit is an open-source Next.js boilerplate that ships with the shared infrastructure of a multi-tenant SaaS product—authentication, teams, billing, audit logs, and webhooks—so you can start on the differentiating parts of your app immediately.
The SaaS Starter Kit is an open-source boilerplate by BoxyHQ that turns a plain Next.js and TypeScript codebase into a deployable enterprise SaaS app. It takes standard project input (a cloned repo, a Postgres database, and environment variables) and produces a working application with account creation, team management, SAML SSO, SCIM directory sync, audit logs, webhooks, and Stripe payments wired up. The template runs on Next.js, uses Tailwind CSS for styling, and stores data in Postgres through Prisma.
pages/api/auth/[...nextauth].ts./api/webhooks/stripe.The README gives a 9-step local setup: fork and clone the repo, run npm install, copy .env.example to .env, start Postgres with docker-compose up -d, push the Prisma schema with npx prisma db push, then launch with npm run dev. To enable advanced features, add API keys for Svix, Stripe, reCAPTCHA, and Sentry to .env; E2E tests run with Playwright after npm run playwright:update.
The SaaS Starter Kit is free to use under the Apache 2.0 License, with no paid tiers listed. Keep in mind that the third-party services it integrates with—Stripe, Svix, Retraced, Sentry, and email providers—have their own pricing.
Yes, the SaaS Starter Kit is open source under the Apache 2.0 License and can be used for commercial projects at no cost. External services in the stack—such as Stripe, Svix, Retraced, and Sentry—may charge separately depending on your usage.
Next.js with TypeScript, Tailwind CSS for styling, and Postgres with Prisma for the database. Authentication is handled by NextAuth.js with BoxyHQ Jackson for SAML SSO and SCIM. Svix handles webhooks, Retraced handles audit logs, Stripe processes payments, and Playwright runs E2E tests.
Yes, SAML SSO is built in through BoxyHQ Jackson. You configure Jackson and the relevant environment variables, and enterprise users can sign in with their corporate identity provider. The same integration also enables Directory Sync (SCIM) for automated user provisioning.
The repository lists "Billing & subscriptions" as coming soon, so Stripe payment processing is wired but full subscription-plan management is not included yet. E2E tests currently support only chromium and firefox, and the dev environment requires Node.js version 18 or higher, PostgreSQL, and Docker Compose (optional for local Postgres).