2. Deployment models¶
Scalio Nexus runs in two modes. Feature parity is now high across both — the Setup Wizard, guided Microsoft Graph connection, Exchange Online scoped email and auto‑managed Cloud Sync all work in either model.
Self‑Hosted¶
- You run the container and own the Entra ID app registration and certificate.
- Graph authenticates with your app’s client ID + an app‑generated self‑signed certificate.
- The Microsoft 365 settings area offers an Assistant mode (guided, minimal) and a Manual mode (full control) — see Connection — Assistant vs Manual.
- Best for organisations with strict data‑residency or air‑gapped requirements.
SaaS (managed)¶
- The vendor hosts the application; each customer tenant grants one‑click admin consent to the central vendor app.
- No per‑tenant app registration or certificate — Graph uses the vendor certificate against the discovered tenant.
- The Microsoft 365 settings area shows a single lean card; there is no Assistant/Manual toggle.
What differs¶
| Capability | Self‑Hosted | SaaS |
|---|---|---|
| App registration & certificate | You create (guided) | Central vendor app |
| Setup Wizard | ✅ | ✅ |
| Assistant/Manual connection toggle | ✅ | — (single card) |
| Graph consent | 1‑click against your app | 1‑click against vendor app |
| Cloud Sync auto‑detect | ✅ | ✅ |
| Notifications (Teams/Email) | ✅ | ✅ |
The rest of the guide calls out (Self‑Hosted only) or (SaaS only) where behaviour differs. Everything else applies to both.