Each workspace in Outline is connected to one more SSO providers, depending on which provider was used to create the workspace originally this may be Google, Microsoft, or Slack.

Providers

To setup and manage authentication providers, head to the Settings → Authentication screen as an admin. Here you can see the already connected SSO providers, disable them, and connect new ones. For example, you could switch from Google to Microsoft authentication.

Access

Outline includes many configuration options to restrict and enable additional access to your Workspace. Navigate to Settings → Security to configure the following settings.

Require invites

By enabling this option new users must be invited to the Workspace before an account can be created. If you want to keep tight control over which of your team mates are able to login then it is recommended to enable this option.

If anyone that has access to your team’s SSO provider (eg Google Workspace) should be able to access Outline then this option can be disabled, this is usually the case.

Allowed domains

You may enter a list of top level domains that have access to the Workspace. Any users that sign-in with SSO will first have their email address checked against this list.

For example if you add acme.com as an allowed domain tom@acme.com would be allowed access, but tom@gmail.com and tom@int.acme.com would both be denied.

Default role

The default role in Outline is usually “Member”, you can change this to “Viewer” so that new users do not have any editing access unless explicitly upgraded by an admin. This option is useful if you are using Outline primarily as read-only reference.