Each workspace in Outline is connected to an SSO provider, depending on which provider was used to create the workspace originally this may be Google, Microsoft, or Slack.It is possible to see which provider is used at the top of the Settings → Security page, however if you would like the provider to be disconnected or disabled this can be done by contacting support.

Outline includes many configuration options to restrict and enable additional access to your Workspace. Navigate to Settings → Security to configure the following settings.

Access

Require invites

By enabling this option new users must be invited to the Workspace before an account can be created. If you want to keep tight control over which of your team mates are able to login then it is recommended to enable this option.

If anyone that has access to your team’s SSO provider (eg Google Workspace) should be able to access Outline then this option can be disabled, this is usually the case.

Allowed domains

You may enter a list of top level domains that have access to the Workspace. Any users that sign-in with SSO will first have their email address checked against this list.

For example if you add acme.com as an allowed domain tom@acme.com would be allowed access, but tom@gmail.com and tom@int.acme.com would both be denied.

Default role

The default role in Outline is usually “Member”, you can change this to “Viewer” so that new users do not have any editing access unless explicitly upgraded by an admin. This option is useful if you are using Outline primarily as read-only reference.