Organization access settings
Read time: 1 minute
Last edited: Feb 10, 2023
Overview
This topic explains how to enable and disable organization access settings in LaunchDarkly.
You must have an Admin role to manage organization access settings. You can disable organization access settings at any time.
Understanding organization access settings
You can configure organization access to allow members of your organization to find and join your LaunchDarkly accounts.
Organization access settings include the following options:
- Enable domain matching
- Enable matched seat provisioning
Enabling domain matching
Domain matching allows new members to discover your account and request access if their verified email domain matches your organization owner's email domain. You can disable domain matching at any time.
To enable domain matching:
- Navigate to the Account settings page.
- Click into the Security tab and scroll to the "Organization access settings" section.
- Check "Enable domain matching."

Domain matching is now enabled. New members whose verified email domains match the Owner's email domain can discover and request access to your LaunchDarkly account.

When a new member requests access to your LaunchDarkly account, the account Owner receives the request in an email. Owners and Admins can approve access requests.
Enabling matched seat provisioning
Matched seat provisioning allows new members with verified email domains that match your organization owner's domain to join your account automatically, if there are available seats. To enable matched seat provisioning you must also enable domain matching. You can disable matched seat provisioning at any time.
To enable matched seat provisioning:
- Navigate to the Account settings page.
- Click into the Security tab and scroll to the "Organization access settings" section.
- Check "Enable matched seat provisioning."

Matched seat provisioning is now enabled, and new members whose verified email domains match the Owner's email domain can automatically join your LaunchDarkly account if there are available seats.
LaunchDarkly assigns the Reader role by default to new members who automatically join your account. To learn more, read LaunchDarkly's built-in roles.
SSO requires members to log in through their identity provider. New members will be able to discover, but not join, accounts with SSO enabled.