Domain Auto-Join
Let anyone with a verified email on your company domain join automatically.
Organizations can claim a verified email domain so that anyone signing in with a verified email on that domain joins as a member automatically, without an invite.
How it works
- An admin claims a domain (for example
acme.com) for the organization. - Auto-join is enabled by default when you claim a domain, and can be toggled off later without giving up the claim.
- From then on, when someone signs in with Google or GitHub using a verified email on that domain, they're added to the organization as a member.
Auto-join is checked at sign-in time using the same verified email or Google workspace domain (hd) claim the identity provider already vouches for -- there's nothing for the joining user to configure.
Claiming a domain
Only org admins can claim a domain, from the organization's settings (same area as Privacy).
Before you can claim a domain:
- You need a linked Google or GitHub identity with a verified email on that exact domain -- this is how Traces confirms you actually control it. Link one from your personal account settings first if you haven't.
- The domain can't be a public email provider (Gmail, Outlook, etc.) or a disposable-email domain.
- Only organization namespaces can claim a domain -- personal namespaces can't.
- A domain can only be claimed by one organization, and an organization can only claim one domain.
Claiming a domain is permanent. You can turn auto-join on and off freely afterward, but the claimed domain itself can't be changed through the product once set -- contact support if you need to change it.
Turning auto-join off
Disabling auto-join stops new sign-ins from joining automatically, but doesn't affect members who already joined. If you remove a member who joined via auto-join, they won't be silently re-added the next time they sign in.
Relationship to invites
Domain auto-join and invite codes are independent. Auto-join covers anyone on the claimed domain without an invite; invites still work for people outside that domain, or when auto-join is off.