Glossary · Operations

What is “Allowed email domain”?

An allowed email domain is a rule that admits anyone whose verified email address ends in a listed company domain, so employees can join without being individually listed.

Also called: company domain login, whitelisted domain

Allowed email domain in detail

For employee occasions, maintaining a name-by-name list is a chore, and the company domain does the job. The organiser lists one or more domains, and anyone who signs in with a matching email address, confirmed by a one-time password, is admitted. This suits townhalls, internal conferences and programmes where every employee is eligible. It is a login-and-eligibility rule, not enterprise single sign-on: Sociana does not offer SAML or SCIM, so identity is confirmed by an OTP sent to the email, not by the company's directory. The practical implications are two. First, a departed employee whose mailbox still works could still join, so sensitive occasions should combine the domain rule with a list or approval. Second, contractors and agency staff on other domains need a separate path. Profile fields such as city or zone can still be collected after sign-in or matched from an import.

How Sociana uses it

The rule is set in identity configuration and works with email OTP. It complements employee-code login and whitelists, but does not replace directory-based single sign-on.

Example

A corporate annual conference signed employees in by email OTP using the company domain.

Questions

How does an allowed email domain work?

Anyone verifying an email address on a listed domain, by one-time password, is admitted, without needing to be on a name list. An allowed email domain is a rule that admits anyone whose verified email address ends in a listed company domain, so employees can join without being individually listed.

Is this single sign-on?

No. Sociana does not offer SAML or SCIM. Identity is confirmed by an OTP sent to the email address. It complements employee-code login and whitelists, but does not replace directory-based single sign-on. The organiser lists one or more domains, and anyone who signs in with a matching email address, confirmed by a one-time password, is admitted.

What are the risks?

Anyone with a working mailbox on the domain can join, so combine it with a list or approval for sensitive occasions and give contractors another route. For employee occasions, maintaining a name-by-name list is a chore, and the company domain does the job.

Want this off your desk?

Our team sets it up before the event and sits on the ops desk with you on the days.