How to turn on email auto-provisioning

Introduction

Email auto-provisioning lets people with your company email address sign up for your NordPass organization on their own. You turn it on after you have verified your domain. Users do not need an individual invite; the invite link is pre-approved and does not require your admin approval. This guide explains how to enable Email auto-provisioning, invite members, and join the NordPass organization using this feature.

This will help you:

• Add new team members to NordPass without sending an invite to each person.
• Keep work emails inside your organization. Domain reservation already blocks personal accounts. Email auto-provisioning gives those people a way in. 
• See who signed up, and turn the setting off if you need to. People who already signed up stay in the organization. 
  
  Note: Email auto-provisioning is off until you enable it. A verified domain by itself does not sign anyone up.

Before you start

• Your subscription plan is "Business" or "Enterprise".
• You are an "Owner" or "Admin" in your organization; members will not see this setting.
• At least one domain is "Verified" under the "Restrict account creation for verified domains" process. The "Pending", "Unverified", or "Failed" domains will not unlock the toggle.
• Verification can take 30 minutes to 72 hours; NordPass checks the domain's verification status about every 15 minutes. 
• You must return and enable email auto-provisioning after the domain is "Verified"; it does not enable automatically.
• Your organization must have a free seat when the person finishes signing up. If it doesn't, they aren't added as an active member. They stay invited, and you can invite them again after you buy more seats.
• Only someone who doesn't already have a NordPass account and whose email is on your verified domain can sign up using email auto-provisioning.

Here's what to do

How to turn on email auto-provisioning

1. Open the NordPass Business Admin Panel and log in.
2. Next, click the "Authentication" button on the left, and select the "Restrict account creation for verified domains" option.
3. Confirm that at least one domain shows "Verified". If the toggle is disabled, the hint says you need at least one verified domain.
4. Enable the "email auto-provisioning" feature.
5. Copy the sign-up link on that page (nordpass.com/app) and share it with people who should sign up.
   
   Note: Your existing invite link does not change. It is not replaced by nordpass.com/app.
    
6. If you wish, turn email auto-provisioning off on the same page — it will take effect immediately. Someone who was in the middle of signing up will not be added, while people who have already become members will remain.
   
   Note: If you remove your last reserved domain, email auto-provisioning will also turn off.

How to create an invite link while email auto-provisioning is on

1. Open the NordPass Business Admin Panel and log in.
2. Next, click the "Members" button on the left, then click the "Invite members" button, and select the "Invite link" option.
3. "Allowed domains" will list your verified domains. You can't type other domains in that field while email auto-provisioning is on.
4. Afterward, share the same invite link you already used.

How to join an organization via an invite link while email auto-provisioning is on

1. Open the NordPass extension, desktop/mobile app, Web Vault, or nordpass.com/app.
2. Enter your work email address.
3. Then enter the code NordPass sends to that email address.
4. Sign up with the login method your organization allows (single sign-on or a NordPass password).
5. Finish the usual new-member steps, such as Multi-factor authentication or a Master Password.
6. Alternatively, you can use your existing invitation link. If email auto-provisioning is on and the email is on a verified domain, Owners/Admins are not held for your approval. You continue in the app from the email code onward.