As an administrator, you can verify your company's email domain to prove that you are the owner of all user accounts with this email domain. This is a prerequisite for setting up SSO and/or SCIM, so you can claim self-registered accounts and add them to your team. Your company's email domain is anything that appears after the "@" symbol in your users' email addresses. For example, Lemontaps owns the email domain lemontaps.com.

TABLE OF CONTENTS

• 1. Advantages of email domain verification
• 2. Setting up email domain verification
• 3. SSO/SCIM Setup
• 4. Account claiming - claiming user accounts

1. Advantages of email domain verification

Claim user accounts with this email domain:

By verifying your email domain, you can automatically or manually assign new users to your team. This gives you full control over the management of these accounts and ensures that design settings, editing rights and other specifications are also applied to self-registered users.

The ability to apply security policies (e.g. SSO, SCIM) to managed accounts:

Before you can use SSO or SCIM with Lemontaps, it's essential to configure your organization's email domains. As an administrator, you must ensure that all email domains used by your organization are added and verified. This setup enables users to log in to Lemontaps using their existing organizational credentials (via SSO) and allows for automatic provisioning of digital business card profiles through SCIM.

Proper domain configuration ensures that only users from authorized and verified domains can access Lemontaps. If an email domain hasn’t been verified, you won’t be able to authenticate via SSO or be automatically provisioned via SCIM.

2. Setting up email domain verification

Navigate to Domain management:

1. Go to Organization > Login and provisioning and click on Manage domain under Domain management.
2. Select Add domain.
   
   

Add domain:

1. Enter your email domain and click on Add.

   2. Copy the information from all fields and paste it into the settings of your DNS management system. Make sure that the DNS entry is left on the server as it may be checked regularly.

       3. Once the email domain is verified, the status in the table will change to “Verified”. 

3. SSO/SCIM Setup

Lemontaps can be setup for SSO and SCIM. The use-cases are described below:

SSO (Single Sign-On) allows users to log in to multiple applications with a single set of credentials, improving security and user experience.
SCIM (System for Cross-domain Identity Management) automates the provisioning and management of user identities across systems, ensuring that user profiles are created, updated, or removed in sync with your organization’s directory. 

To setup SSO and SCIM, we provided the following articles with step-by-step guides below:

→ Overview SSO/SCIM 

→ Setup Guide SSO

→ Setup Guide SCIM

4. Account claiming - claiming user accounts

There are various ways to claim user accounts for your team. You can specify that all users who register with your email domain are automatically added to your team or a specific unit. Alternatively, you can also check which colleagues have registered independently and assign them to your team manually.

a) Activate automatic account claiming:

1. You can now access the settings under the three dots in the domain menu.

   Under settings, select whether new users should be automatically added to your team.

2. Make sure that they are assigned to the correct unit (e.g. “Global (Standard)”).

   
   

b) Manual account claiming:

1.     Click on “Claim accounts” 
   
   
   
   
2.     Check accounts: Download a list (e.g. an Excel file) to view all user accounts with a verified email domain.
   
3.     Select accounts: You can either import all accounts or select specific accounts.
   
   
   
4.     Complete the import: After the import, the users will appear in the user overview.