This guide explains how to configure an organization.

Administrators can:

• Make changes to how the organization is configured, like who is allowed access.
• Modify and delete any link.
• Grant administrative privileges to other users.
• Perform any task a Member can.

Your organization must have at least one administrator. The person who creates an organization is automatically an administrator.

To add or remove administrators:

1. Navigate to the Settings page.
2. Under the administrators section, add or remove email addresses.
3. Click Save.

Members can:

• Create new links.
• Modify or delete their own links.
• Grant ownership of their own links to other Members.
• Access any link.

You can add up to 30 Members using email addresses. Once a new email address is added, then the user can access the organization if one of the sign-in providers verifies the user’s identity. To add or remove members:

1. Navigate to the Settings page.
2. Under the Members section, add or remove email addresses.
3. Click Save.

Configuring Members manually is cumbersome. This is the reason for the 30 Member limit. To ease Member management, we recommend configuring Domains, which is covered in the next section.

You can associate domains with your organization, which grants access based on the domain of the user’s email address. For example, if foo.com is associated with your organization, then a user who authenticates as bar@foo.com can access your organization.

You can associate multiple domains with your organization. A domain may be associated with at most one organization.

To add or remove domains, email support@yoslash.com. When emailing, be sure to:

• Specify your organization’s name.
• Use an email address from the domain you wish to add or remove. This helps us validate that the domain belongs to your organization.

You can configure SSO using any identity provider (IdP) that supports OpenID Connect (OIDC). To set up SSO:

1. Set up a new OIDC application per your identity provider’s instructions. When prompted for a Callback URL, use https://yo.yoslash.com/__/auth/handler.
2. Take note of the following values from your identity provider:
   • Client ID
   • Issuer URL
   • Client Secret
3. Navigate to the YoSlash Settings page.
4. Under the Single Sign-On (SSO) section, input the values gathered from your identity provider.
5. Check the Enabled checkbox.
6. Click Save.

You can test your SSO integration by signing out and signing back in. When you select your organization on the Sign In page, you will see an option to log in using SSO. If the integration does not work, you can sign in using the sign-in provider you first used (either Google or Microsoft).

When SSO is enabled for your organization, you may disable the Google and Microsoft sign-in providers for Members. Administrators will always have the option to sign in using one of these providers. This helps prevent lockouts in case SSO is misconfigured.

To make changes to sign-in providers:

1. Navigate to the Settings page.
2. Under the Sign-In Providers section, check or uncheck the Google and Microsoft options.
3. Click Save.