This article covers:
- What does Domain Control do?
- How does Domain Control allow me to manage and restrict users on my e-mail domain?
- What features become available after I enable Domain Control?
- How do I enable Domain Control?
What does Domain Control do?
Domain Control allows access to features that help you manage user accounts associated with your domain. In other words, the settings in this section can be applied to all employees with a work email address.
In particular, enabling Domain Control will provide the following benefits:
- An additional layer of control over who can create an account
- Fine-tuned user restrictions through Domain Groups
- Company Card management and reconciliation
- SAML Management
First of all, policies are at the core of using Expensify. A policy is the set of rules, settings, and spending limits for expense reports for a specific group of users in your organization.
Domain Control takes a step beyond the policy framework. It helps you create a set of rules and settings that applies to any Expensify user using your company domain as their primary e-mail. Keep in mind that this applies to users who aren't even a member of your policy!
After validating your domain to enable Domain Control, you'll become a Domain Admin—essentially a "super" admin, granting the ability to edit Domain Control settings and create/delete new user accounts connected to the domain e-mail address.
How does Domain Control allow me to manage and restrict users on my e-mail domain?
One of the main benefits of enabling Domain Control is the ability to restrict users on your company domain to follow your desired expense management workflow. Furthermore, once your domain is validated, only a Domain Admin can create a new Expensify account using your company e-mail address.
More on managing domain members and adding additional restrictions can be found in the article here.
What features become available after I enable Domain Control?
In many cases, folks tend to enable Domain Control to gain access to features that are otherwise not available. Specifically, Domain Control is the gateway to accessing the features listed below:
- Centrally managed company cards
- Company card reconciliation
- SAML Single-Sign On
- SAML authentication with ADFS
- Google Apps Single Sign-On
How do I enable Domain Control?
There are three main methods for enabling Domain Control:
- Host a file
- Add a DNS record
- Contact our Customer Success Team
A walkthrough for all three validation options can be found here!