Objective
This article explains how to add or remove the verified domains on which a single sign-on profile is enforced. Users with email addresses on an enforced domain must log in through your identity provider.
Product
Twilio Organizations
Environment
Twilio Console
User Account Permission/Role(s) Required
SSO read permission to view the tab and SSO update permission to change it. Without the update permission the domain list is shown read-only, with no Save or Cancel actions.
Procedure
- In the Twilio Console, select Settings in the left sidebar.
- Select Organization settings, then Single sign-on (SSO).
- Select the profile you want to change, then open the Enforced domains tab. The page explains that all users with email addresses from enforced domains will be required to log in using SSO.
- In Domains, add the domains you want to enforce and remove any you no longer want enforced.
- Select Save. The Update enforced domains for this profile? dialog appears, explaining that SSO login will be enabled for any added domains and disabled for any removed domains, and listing Domains added and Domains removed.
- Select Update domains. A confirmation appears: "Enforced domains updated successfully."
Additional Information
- Only your organization's verified domains can be enforced. If a domain is missing from the list, use the verify a new domain here link to verify it first.
- You can add and remove domains in the same save, the confirmation dialog lists both sets.
- Selecting Save without having changed anything does not open the confirmation dialog.
- Select Cancel in the confirmation dialog to keep the dialog closed and your unsaved selection intact; select Cancel on the page to discard your changes and return to the profiles list.
- A domain must be de-enforced before its SSO profile can be deleted.
This content was generated by AI and reviewed, edited, and verified by a human.