3.4 KiB
Restrict account creation
{!owner-only.md!}
Each Zulip account is associated with an email address. If your organization allows multiple authentication methods, it doesn't matter which one is used to create an account. All authentication methods will work for all users in your organization, provided that they are associated with the account email. To log in with email, users are required to verify their email account by clicking on a validation link.
Zulip provides a number of configuration options to control who can create a new account and how users access their accounts:
-
You can require an invitation to sign up (default), or you can allow anyone to join without an invitation.
-
You can restrict who can invite users to your organization. To protect your organization, creating reusable invite links is always limited to administrators.
Regardless of whether invitations are required, you can:
-
Restrict sign-ups to a fixed list of allowed domains (including subdomains). For example, you can require users to sign up with the email domain for your business or university.
-
Disallow signups with known disposable email address. This is recommended for open organizations to help protect against abuse.
Set whether invitations are required to join
{start_tabs}
{settings_tab|organization-permissions}
- Under Joining the organization, toggle Invitations are required for joining this organization.
{!save-changes.md!}
{end_tabs}
Change who can send invitations
{!owner-only.md!}
You can restrict the ability to invite new users to join your Zulip organization to specific roles. To protect your organization, while permission to send out individual email invitations is configurable, creating reusable invitation links is always limited to administrators.
{start_tabs}
{settings_tab|organization-permissions}
- Under Joining the organization, configure Who can invite users to this organization.
{!save-changes.md!}
{end_tabs}
Configuring email domain restrictions
Restrict sign-ups to a list of domains
{start_tabs}
{settings_tab|organization-permissions}
-
Set Restrict email domains of new users? to Restrict to a list of domains.
-
Click Configure to add any number of domains. For each domain, you can toggle Allow subdomains.
-
When you are done adding domains, click Close.
{!save-changes.md!}
{end_tabs}
Don't allow disposable domains
{start_tabs}
{settings_tab|organization-permissions}
- Set Restrict email domains of new users? to Don't allow disposable emails.
{!save-changes.md!}
{end_tabs}
Allow all email domains
{start_tabs}
{settings_tab|organization-permissions}
- Set Restrict email domains of new users? to No restrictions.
{!save-changes.md!}
{end_tabs}