Email domain rules determine how users are allowed to authenticate with the Content Innovation Cloud.
Federated authentication is available only for users whose email domains are assigned to at least one external identity provider. Using the Content Innovation Cloud Administration Portal, you can assign email domains to specific identity providers and decide whether any email domains should allow local authentication.
The following table describes how user sign-in options vary depending on how you have configured the email domain in the Content Innovation Cloud.
| Conditions | Result |
|---|---|
|
The email domain is assigned to at least one enabled identity provider. The Allow Local Authentication option is selected. |
Users with the email domain can sign in using either local authentication (if they have local Content Innovation Cloud credentials) or one of the domain's assigned identity providers. |
|
The email domain is assigned to at least one enabled identity provider. The Allow Local Authentication option isn't selected. |
Users with the email domain can sign in only by using one of the domain's assigned identity providers. |
|
The email domain is not assigned to any enabled identity providers. The Allow Local Authentication option is ignored in this case. |
Local authentication is the only sign-in option available for users with the email domain. |
|
The email domain is not configured in the Administration Portal. |
Local authentication is the only sign-in option available for users with the email domain. |
See the following sections for information on adding, modifying, or removing an email domain: