Compute basis
Nextcloud, Collabora Online CODE and identity service on one workload at starting size M. File volume and concurrently edited documents determine whether L is needed.
Files, calendars and office with Nextcloud and SSO
Files, calendars, contacts and documents in one place: Nextcloud with browser office from Collabora Online CODE, sign-in through your identity service, operated in the data centre of your choice.
- Nextcloud and Collabora Online CODE
- Keycloak or Authentik included
- Operated in Germany, Switzerland or Austria
Starting point
What teams use Nextcloud with office for
Replacing Microsoft 365 or keeping files in-house takes more than storage: shared editing, calendars and one sign-in for everyone.
Edit documents together
Texts, spreadsheets and presentations are edited in the browser, the files stay in Nextcloud.
Calendars, contacts, tasks
Calendars, addresses and tasks sit in the same workspace as the files.
One sign-in for everyone
One account in the identity service is enough; sharing and blocking apply in Nextcloud.
How it fits together
Nextcloud, office and sign-in working together
Nextcloud
Files, calendars, contacts and tasks; OIDC through the user backend.
Collabora Online CODE
Office editors in the browser; document access and sign-in run through Nextcloud (WOPI), no separate SSO sign-in path.
Keycloak or Authentik
Included in the package price. Protocols and roles are defined per application.
Extensions and scope limits
Matrix/Element and Jitsi are extensions. Calendar email delivery requires existing customer SMTP. The package covers files and collaboration.
- Synapse
- Element Web
- Jitsi Meet
Operations
How your Nextcloud is operated
Core apps, monitoring and updates within the agreed scope.
Restore order
Planned restore order: identity service, consistent Nextcloud database and files, office service configuration; the documents live in Nextcloud. Then check sharing and document access.
Checks before release
CODE is released continuously. Each version of Collabora, the Nextcloud app and Nextcloud is checked for compatibility before it is applied, and representative document formats are verified before approval.
Offer
What does Nextcloud with office and SSO cost?
The price includes Nextcloud and Collabora Online CODE on one M workload. Keycloak or Authentik comes with the package at no extra charge.
Essential, Compute Mfrom €259.70 net per monthEstimate before setup and separate licences.
Calculation
- Workload, one app included
- €129.90 net per month
- Compute M
- €29.90 net per month
- One additional app
- €99.90 net per month
- Keycloak or Authentik
- included in the package
- Service level: Essential
- included in price
- Total with Business
- €359.60 net per month
Straightforward provisioning within a few business days
Payment
- Bank transfer
One-time setup based on scope, specified in the proposal. Additional storage is booked in 50 GB steps: €4.99 net per month. Assess Business for shared file and office work. The published service-level ladder defines the agreed scope.
Selection
Sign-in for Nextcloud: Keycloak or Authentik
Keycloak or Authentik is included in the package price. You choose the identity service that fits your organisation.
| Choice | Scope | Configurator entry |
|---|---|---|
| Keycloak | OIDC/SAML, brokering and LDAP/AD federation. Realm and client configuration are operating tasks. | Configure package: Keycloak |
| Authentik | OIDC/SAML, sources, flows and LDAP/proxy providers. Account for outposts per integration. | Configure package: Authentik |
Selection
Which size fits your files and users?
Single-app hosting operates one application. The package adds further apps and shared identity planning; integrations are scoped in the proposal.
| Compute | Resources from registry | Essential, net per month |
|---|---|---|
| S | 2 vCPU · 4 GB RAM · 80 GB NVMe SSD | €229.80 net per month |
| M | 4 vCPU · 8 GB RAM · 80 GB NVMe SSD | €259.70 net per month |
| L | 8 vCPU · 16 GB RAM · 80 GB NVMe SSD | €319.70 net per month |
- M is the starting size. WZ-IT checks which size your use needs before the proposal, based on file volume and concurrently edited documents. Users are not limited; XL can be selected in the configurator.
Licences and editions
Licences and editions: Nextcloud, office, sign-in
As of 25 October 2026. Free cores form the pricing basis. Commercial editions and vendor services are separate.
| Licence | Function and boundary |
|---|---|
| Nextcloud (AGPL-3.0) | OIDC through the free user_oidc app. Commercial subscriptions and vendor services are separate. Licence file · Feature documentation · Edition boundary |
| Collabora Online CODE (MPL-2.0) | Source code under MPL-2.0, the code-brand branding package under EULA. CODE is the development edition (rolling release) without vendor support or long-term support; the supported edition is a separate subscription product. Sign-in runs through Nextcloud (WOPI). Licence file · Feature documentation · Edition boundary |
| Synapse (AGPL-3.0) | Free Synapse core; Synapse Pro and commercial vendor support are separate. Licence file · Feature documentation |
| Element Web (AGPL-3.0) | Free web client; sign-in through Synapse. Commercial Element Server Suite is outside the core. Licence file · Feature documentation |
| Jitsi Meet (Apache-2.0) | Optional video. Sign-in through OIDC (code flow with PKCE) is documented with Keycloak, and Prosody validates the tokens; other providers are not documented. Media networking is planned separately. Licence file · Feature documentation |
| Keycloak (Apache-2.0) | OIDC, SAML and identity brokering in the free core. Licence file · Feature documentation |
| Authentik (MIT) | MIT core with OIDC, SAML, LDAP and proxy providers. Enterprise features have a separate licence and are not included. Licence file · Feature documentation · Edition boundary |
Questions about Nextcloud with office and SSO
Answers to the most important questions
- Workload, compute, additional apps, storage and service level are summed from the registry. Keycloak or Authentik is included in the package price. One-time setup is based on scope and defined in the proposal; commercial licences are separate.
- Yes. The two entry links select exactly one identity service in the configurator. An existing customer identity provider can be connected after technical review. Sign-in, roles, blocking and emergency access are reviewed together before approval.
- Collabora Online CODE is the development edition of Collabora Online in the package. The vendor ships it as a rolling release without support and without long-term support. The supported edition is a separate subscription product from the vendor and is not part of the estimate. Size and load of the office service depend on the concurrently edited documents and are defined in the proposal. Chat and video are extensions.
- Backup scope and retention are specified in the proposal using the registry components and your requirements. The recovery order shown describes the planning for this package.
- Original files, databases, configuration and customer-owned exportable keys are recorded in the exit scope. Export formats and handover are specified per app. See the data portability framework.
- Operations in data centres in Germany, Switzerland or Austria. A confidentiality agreement under Section 203 German Criminal Code (StGB) is available on request at the German location. A subdomain under wz-it.cloud and one .de domain are included; your own domain can be connected by CNAME. Monthly cancellation with 30 days notice to month-end, no minimum term. WZ-IT sets no user limit; size depends on Compute S to XL and edition limits.
Knowledge
Nextcloud and office in detail
Applications
Operations and handover
Related articles
- PHP Update 8.5.12, 8.4.27, 8.3.36 and 8.2.35: CVE-2026-109618 and CVE-2026-109619 (PHP2Shell), Affected Software and MeasuresPHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution: CVE-2026-109618 and CVE-2026-109619, each CVSS 4.0 9.2, called...
- Nextcloud Built-in CODE Server: Unauthenticated Command Injection (CVE-2026-110447), Update to 26.4.303 or Remove the AppA Nextcloud with the app Collabora Online - Built-in CODE Server (richdocumentscode) in version 26.4.302 or older can be made to run operating system commands...
Reviews & projects
Managed open source with consulting and operations
Customer feedback on open-source selection, implementation, maintenance and long-term operations.
Networking & Provisioning
WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
International
Built in Germany's Ruhr Valley. Running worldwide.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
Selected projects
- LiveRemote access platform for distributed water treatment plantsABCO Water Systems · Australia · Secure Access & OT
- 81%AWS migration with substantially lower operating costsEVA Real Estate · UAE · Cloud exit & infrastructure
- 98%Provision new sites in minutes instead of hoursnextGYM GmbH · Germany · Automation & IoT
Read client reviews
Collaboration and office
Configure Collaboration and office and request an offer
Choose the identity service and add requirements in the configurator. WZ-IT specifies setup, sizing and operating scope in the proposal.
- Straight with Timo and Robin - no sales team, no pitch
- A professional assessment of your situation
- Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.