Email domain authentication

Email domain authentication, also called discoverable domain authentication, controls how users join your Organization. When enabled, any user with an email address that matches a verified domain can join your Organization from Admin Panel›Join Organization ↗.

• Users with an email address matching a verified domain can join from Admin Panel›Join Organization ↗.
• Users still create and manage their own credentials (email and password). This feature controls Organization membership, not authentication.
• For single sign-on authentication without separate credentials, use SSO instead (Enterprise plans).

You need to verify ownership of your domain before enabling this feature. Domain verification uses a DNS TXT record. See domain verification for the full setup steps.

1. Open Admin Panel›Administration›Access ↗ in the Admin Panel.
2. In the Domain Ownership section, find the verified domain you want to make discoverable.
3. Turn on Discoverable for that domain.

The Admin Panel shows a confirmation message: Email domain authentication enabled for domain.com.

You can disable email domain authentication by turning off Discoverable for the domain in the Domain Ownership section.

• Users with matching domain emails can no longer join automatically from Admin Panel›Join Organization ↗.
• Existing members aren't affected.
• You'll need to manually invite new users unless SSO is configured.