Register domains

Overview

By default, users cannot self-register in Envtracker.

Users can only access a tenant by one of these methods:

• Being added by an admin through the office/admin UI
• Signing in with SSO (if configured)
• Self-registering (only if Registered Domains is enabled and their email domain is allowed)

Registered Domains lets you manage which email domains are allowed for user registration. Only users with email addresses matching these domains can register.

Enable / Disable self-registration

• Enabled: users can register if their email domain matches an allowed domain.
• Disabled: self-registration is blocked (existing configuration can remain saved).

Allowed domains

Add one or more domains that are allowed to register.

Examples:

• @company.com
• @sub.company.com

Only the domain part of the email is checked. For example, user@company.com matches @company.com.

Registration flow

When self-registration is enabled, Envtracker uses this flow:

1. User enters their email
2. Envtracker validates that the email’s domain is in the Registered Domains allow-list
3. Envtracker sends a one-time password (OTP) to the email address
4. User verifies the OTP
5. After verification, the user sets their username and password

Project assignment

After registration, project assignment must be done manually by an admin.

Without manual assignment, the user can sign in but will not have access to any projects.

Security and operations notes

• Use Registered Domains only for domains you control
• If you use both SSO and self-registration, prefer SSO for managed access and use Registered Domains as a fallback only when needed
• Disabling Registered Domains immediately blocks new registrations but does not remove existing users