# Allowlist a domain

> For the complete documentation index, see [llms.txt](https://falconer.com/docs/llms.txt).

Use the domain allowlist to allow teammates in your organization to log in with SSO.


Use the domain allowlist to allow teammates in your organization to log in with SSO. When you add a domain, anyone who signs in with a matching company email address is instantly added to your Falconer organization.

## Set up your allowlist

Only owners can manage the domain allowlist.

1. Go to **Organization Settings**.
2. Go to the **Domain allowlist** section.
3. Enter your company domain (for example, `yourcompany.com`) and click **Add domain**.

You can add multiple domains and remove them at any time.

Once a domain is allowlisted, any user who signs in with a matching email is automatically added to your organization as a member. Members can create and edit documents and access all published company content. You can update their role to owner at any time from Organization Settings.

## Confirm a domain from a sign-in prompt

If a teammate signs in with a company email that isn't yet on your allowlist, Falconer may prompt you to confirm their domain. Confirming it adds the domain to your allowlist so all future sign-ins from that domain are approved automatically.

## What's not allowed

- **Free or public email domains** (like `gmail.com`, `yahoo.com`)
- **Invalid formats** (like incomplete domains)

## Allowlist vs manual invites

The allowlist and manual invites work together:

| Method | Best for |
| --- | --- |
| Domain allowlist | Automatically onboarding your whole team by email domain |
| Manual invite | Adding specific individuals, contractors, or users from other domains |

Manual invite links are valid for 7 days. If a link expires, an owner can resend it from Organization Settings.