From 74002a69b8d17bf43ee4e9c46c9090449c6bff31 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ji=C5=99=C3=AD=20Kuchy=C5=88ka=20=28Anty=29?= Date: Wed, 29 Jul 2026 20:24:05 +0200 Subject: [PATCH] docs: document that only a server administrator can set the organization SSO domain --- platform/sso/sso_getting_started.mdx | 11 ++++++++++- platform/sso/sso_server_setup_organizations.mdx | 12 +++++++++++- 2 files changed, 21 insertions(+), 2 deletions(-) diff --git a/platform/sso/sso_getting_started.mdx b/platform/sso/sso_getting_started.mdx index 829b6249d..ca6183e9e 100644 --- a/platform/sso/sso_getting_started.mdx +++ b/platform/sso/sso_getting_started.mdx @@ -42,7 +42,7 @@ After you have registered and configured the OIDC application, you need to provi data={[ { item: 'Domain name', - description: 'Used to identify the organization on login page', + description: 'E-mail domain used to identify the organization on the login page. Only a server administrator can set or change it', }, { item: 'Client ID', @@ -63,6 +63,15 @@ After you have registered and configured the OIDC application, you need to provi ]} /> +:::caution Domain name is set by a server administrator +The `Domain name` field is read-only for organization owners, so you cannot fill it in or change it yourself. Ask a +server administrator to set it for your organization. On Tolgee Cloud, contact us via the chat on our website or our +community [Slack channel](https://Tolg.ee/slack). On a self-hosted instance, ask the user who administers your Tolgee +server. + +The domain name is required for an enabled SSO configuration, so you cannot turn SSO on until an administrator has set +it. Members are matched to your organization by their e-mail domain when they log in. +::: After you have provided this information, click the **Save** button. You can now log in to your Tolgee account using SSO. For this purpose, you can use the **Login with SSO** button on the login page and provide your organization's domain name. diff --git a/platform/sso/sso_server_setup_organizations.mdx b/platform/sso/sso_server_setup_organizations.mdx index 422770bfb..18b479c32 100644 --- a/platform/sso/sso_server_setup_organizations.mdx +++ b/platform/sso/sso_server_setup_organizations.mdx @@ -26,4 +26,14 @@ tolgee: enabled: true ``` -Restart your Tolgee server to apply the changes, then follow the [SSO Getting Started](/platform/sso/sso_getting_started) guide to set up the SSO for specific organizations. \ No newline at end of file +Restart your Tolgee server to apply the changes, then follow the [SSO Getting Started](/platform/sso/sso_getting_started) guide to set up the SSO for specific organizations. + +## Set the domain name for an organization + +Organization owners can fill in all SSO fields except the domain name, which only a server administrator can set. This +prevents an organization from claiming an e-mail domain it does not own, because every user signing in with that domain +is routed to the organization. + +To set it, sign in with an account that has server administrator rights, go to the `Administration` section, find the +organization in the `Organizations` list, click its `Settings` button, and fill in the `Domain name` field in the +`Single Sign-On (SSO)` section. For everyone else the field stays read-only. \ No newline at end of file