Settings for employee accounts
In the Employee settings, under organisation settings, you can create a list of domains to be used for employee accounts. This will prevent accounts being created with random email addresses. For each domain in this list, you can determine whether Single-Sign-On should be used.
To be able to perform the actions below, you need organisation manager access rights.
Adding domains
The 'Employees' submenu under Organisation settings has a Settings tab. Enable email address restrictions by choosing 'Yes', and then add one or more domains to the list.
It is only possible to list domains that were already added to the Domains overview.
Single-Sign-On
For each added domain, you can require SSO. By default, this is set to 'No'. Click the Edit-icon to change this. The available SSO providers are Google or Microsoft.
This forces all BEX users with email addresses of this domain to login through the chosen identity provider. Only enable this if you own this domain name, and never use it for general domains like 'gmail.com' or 'hotmail.com'.
Read access rights for Employees for more information on setting access rights to various PMS features.