Allowed Domains for Account Creation
Approved for Sign Up domains—who can get an account on first login.
What This Is For
Approved for Sign Up (also called allowed email domains) lists which email domains may register automatically on first login.
In Configure, under Control User Access and Attributes, open Approved for Sign Up to add domains such as company.com. Users whose email matches a listed domain are created the first time they complete a qualifying sign-in.
Who This Is For
Workspace administrators.
How It Works
- Open Configure → Approved for Sign Up.
- Choose Add Email Domain and add each domain people may use to self-register (for example
acme.com). - Test with a new email on that domain.
Optional: turn on Allow all e-mail domains if every address should be able to self-register on first login. That disables adding a curated list while the switch is on—use with care.
This applies when someone signs in with:
- Magic Links — first successful link for a new address on an approved domain creates the account
- Microsoft — first successful Microsoft sign-in creates the account when the email Skillhabit picks from the profile is on an approved domain
It does not replace OpenID Connect’s separate auto-create switch under More options. Admin invites, the External API, SCIM, Entra sync, and registration pages can still create accounts regardless of this list.
Full sign-in behavior: SSO and Authentication. How Skillhabit picks the email from Microsoft: SSO and Email Addresses.
Related
- SSO and Authentication
- Introduction — provisioning vs sign-in
- Login Methods
- Registration Pages
