Allowed domains

You may enter a list of top level domains that have access to the Workspace under Settings → Authentication → Restrictions. Any users that sign-in with SSO will first have their email address checked against this list.

For example if you add acme.com as an allowed domain tom@acme.com would be allowed access, but tom@gmail.com and tom@int.acme.com would both be denied.

Note that admins are an exception to this rule and can directly invite users outside of the allowed domains list.