# Allowlist a domain

Use the domain allowlist to allow teammates in your organization to log in with SSO. When you add a domain, anyone who signs in with a matching company email address is instantly added to your Falconer organization.

## Set up your allowlist

Only owners can manage the domain allowlist.

1. Go to **Organization Settings**.
2. Go to the **Domain allowlist** section.
3. Enter your company domain (for example, `yourcompany.com`) and click **Add domain**.

You can add multiple domains and remove them at any time.

Once a domain is allowlisted, any user who signs in with a matching email is automatically added to your organization as a member. Members can create and edit documents and access all published company content. You can update their role to owner at any time from Organization Settings.

## Confirm a domain from a sign-in prompt

If a teammate signs in with a company email that isn't yet on your allowlist, Falconer may prompt you to confirm their domain. Confirming it adds the domain to your allowlist so all future sign-ins from that domain are approved automatically.

## What's not allowed

- **Free or public email domains** (like `gmail.com`, `yahoo.com`)
- **Invalid formats** (like incomplete domains)

## Allowlist vs manual invites

The allowlist and manual invites work together:

| Method | Best for |
| --- | --- |
| Domain allowlist | Automatically onboarding your whole team by email domain |
| Manual invite | Adding specific individuals, contractors, or users from other domains |

Manual invite links are valid for 7 days. If a link expires, an owner can resend it from Organization Settings.