Email domain authentication

Available on Team plans and above

Email domain authentication controls how new users join your Organization. When enabled, anyone who signs up or logs in with an email address matching your verified domain is automatically added to your Organization.

• Users signing up or logging in with an email matching your verified domain are automatically added to your Organization.
• Users still create and manage their own credentials (email and password). This feature controls Organization membership, not authentication.
• For single sign-on authentication without separate credentials, use SSO instead (Enterprise plans).

You need to verify ownership of your domain before enabling this feature. Domain verification uses a DNS TXT record. See domain verification for the full setup steps.

1. Open Admin›Access ↗ settings.
2. In the Authentication section, click Activate email domain authentication.
3. Confirm by clicking Enable email domain authentication in the dialog.

The Access page updates to show the feature is active.

You can disable email domain authentication at any time from the Access settings page.

• New users with matching domain emails won't be auto-added anymore.
• Existing members aren't affected.
• You'll need to manually invite new users unless SSO is configured.