SaaS and self-hosted versions differences

  • Last update on May 21st, 2025

The new SaaS version of Configuration Manager increasingly integrates it with CoreView. The table below shows the most important differences compared to the self-hosted version:

AREA CM SAAS CM SELF-HOSTED
Onboarding Managed via CoreView or the Partner App Managed directly within the Configuration Manager app on the Tenants page.
Tenant configuration Tenant actions such as renaming, removing, or reinstalling tenants are handled via CoreView or the Partner App. Actions such as renaming, removing, or reinstalling tenants are executed within the Configuration Manager app in the Tenants page.
Backend infrastructure Hosted on CoreView's cloud infrastructure, so no access to Azure DevOps required. Actions and data hosted on the customer's own DevOps organization.
Downstream tenants Downstream tenants are not available—all tenants act as baselines. Downstream tenants remain available.
Reconcile selector On the Reconcile page, baselines need to be manually selected for comparison. When a downstream tenant is selected, the baseline associated for comparison is automatically selected.
Reporting Reporting is handled directly via CoreView. Reporting is available on CoreView or by connecting to PowerBI and Log Analytics.

As for certain differences, we recommend reading the information below:

Azure DevOps

With the new SaaS version, operations on DevOps are no longer necessary, so the following features are not available: 

  • organization settings
  • repository pull requests
  • access to the repository
  • Sync status auto-refresh toggle
  • agent pool selection
  • Sync timeout settings

Downstream tenants

Actions requiring downstream tenants will not be available, including the following:

  • baseline propagation
  • “Apply to/Exclude from” and “Move to”
  • automatic selection of the baseline comparison tenant

Sync

At launch, Configuration Manager SaaS will support service principal authentication only. Configurations managed via a service principal will be supported automatically with no additional setup. User account authentication, via delegated authentication, will be included in a future release. Service account authentication via a username and password will not be supported in SaaS. 

The following Sync features will be coming in a later update of SaaS:

  • delegated authentication
  • Sync Report Search
  • Sync schedule customization
  • custom variables for configurations