Organization access settings
Read time: 2 minutes
Last edited: Oct 02, 2024
Overview
This topic explains how to enable and disable organization access settings in LaunchDarkly.
You must have an Admin role to manage organization access settings. You can disable organization access settings at any time.
About organization access settings
You can configure organization access to allow members of your organization to find and join your LaunchDarkly accounts.
Organization access settings include the following options:
- Enable domain matching
- Enable matched seat provisioning
Enable domain matching
Domain matching allows new members to discover your account and request access if their verified email domain matches your organization owner's email domain. You can disable domain matching at any time.
To enable domain matching:
- Click the gear icon in the left sidenav to view Organization settings.
- Click Security and scroll to the "Organization access settings" section.
- Check "Enable domain matching."
Domain matching is now enabled. New members whose verified email domains match the Owner's email domain can discover and request access to your LaunchDarkly account.
When a new member requests access to your LaunchDarkly account, the account Owner and Admins receive the request in an email, and the pending request is available for approval on the Members page. Owners and Admins can approve access requests. To learn more, read Accept pending requests.
Enable matched seat provisioning
Matched seat provisioning allows new members with verified email domains that match your organization owner's domain to join your account automatically, if there are available seats. To enable matched seat provisioning you must also enable domain matching. You can disable matched seat provisioning at any time.
To enable matched seat provisioning:
- Click the gear icon in the left sidenav to view Organization settings.
- Click Security and scroll to the "Organization access settings" section.
- Check "Enable matched seat provisioning."
Matched seat provisioning is now enabled, and new members whose verified email domains match the Owner's email domain can automatically join your LaunchDarkly account if there are available seats.
LaunchDarkly assigns the Reader role by default to new members who automatically join your account. To learn more, read Built-in roles.
SSO requires members to log in through their identity provider. New members will be able to discover, but not join, accounts with SSO enabled.