# Allowed domains

You may enter a list of top level domains that have access to the Workspace under **Settings → Authentication → Restrictions**. Any users that sign-in with SSO will first have their email address checked against this list.

For example if you add **acme.com** as an allowed domain **tom@acme.com** would be allowed access, but **tom@gmail.com** and **tom@int.acme.com** would both be denied.

Note that admins are an exception to this rule and can directly invite users outside of the allowed domains list.

---

**Documents**

- [Getting started](https://docs.getoutline.com/s/guide/doc/getting-started-CB6Ipl9Cdc)
- [Documents](https://docs.getoutline.com/s/guide/doc/documents-UiH1h0aQFQ)
- [Integrations](https://docs.getoutline.com/s/guide/doc/integrations-eUbAF2WAjF)
- [AI](https://docs.getoutline.com/s/guide/doc/ai-IFCYbrK7EU)
- [Administration](https://docs.getoutline.com/s/guide/doc/administration-GmaueCNdk1)
- [Import data](https://docs.getoutline.com/s/guide/doc/import-data-D2ZvLqz411)
- [Export data](https://docs.getoutline.com/s/guide/doc/export-data-Da6C7HqL8M)
- [Cloud hosting](https://docs.getoutline.com/s/guide/doc/cloud-hosting-CxJbubIhje)