
Matching organizations shown during onboarding
How organization discovery works
Each organization has a list of discovery domains: the email domains whose signups can find the organization. When someone signs up with an email address on one of those domains and verifies it, OneSignal shows them the organization during onboarding and lets them request to join.- Discovery runs after email verification. OneSignal checks for matching organizations in the About you onboarding step, which starts only after the new user verifies their email address.
- Matching is exact.
acme.comdoes not matcheu.acme.com. List each domain and subdomain separately. - Signups see only the organization name and member count. Signups never see member names, emails, or any other organization data.
- Every request needs approval. A matching email domain makes someone eligible to request access. It never adds them to the organization automatically.
- Invited users skip discovery. A user who already has an invitation goes straight to the organization that invited them.
- Personal and disposable email domains never match. Signups with addresses like
gmail.comoroutlook.comcreate their own organization as before.
How domains get added
OneSignal adds a discovery domain automatically in two cases, and Organization Admins can add more:- When an organization is created from a company email address, OneSignal adds the creator’s email domain.
- When every confirmed member shares one company email domain and the organization has no discovery domains yet, OneSignal adds that domain. This applies to existing organizations and is checked again when members join or leave.
- An Organization Admin adds a domain from the organization’s security settings. See Manage discovery domains.
Request to join an organization
When you sign up with a company email address that matches an existing organization, OneSignal shows matching organizations after you verify your email and complete the About you step.Verify your email address
Complete the About you step
Choose your team's organization
Confirm the request
Request outcomes
Review join requests
Organization Admins review requests on the Pending invites tab. OneSignal emails each Admin when a new request arrives, and the tab shows a count of open requests.Open Pending invites
Choose a role
Approve, deny, or block

Reviewing a join request on the Pending invites tab
- Approve adds the requester to the organization with the role you chose. An approved member is the same as an invited member. You can change their role later from Team members.
- Deny removes the request. The requester can ask again later.
- Block removes the request and stops that person from requesting to join this organization again. You can block someone whether or not they have an open request.
Manage discovery domains
Organization Admins choose which email domains can find the organization.Open Security settings
Find Organization discovery
Add or remove a domain

Adding a discovery domain from Security settings
Which domains you can add
You can only add a domain that a confirmed member of your organization already uses for their email address. You choose from those domains. You cannot type in a new one. To cover another domain, such as a subsidiary’s, first invite a team member with an email address on that domain. After they confirm their account, the domain becomes available to add. You cannot add a domain that is:- A personal or disposable email domain, such as
gmail.com. - Managed by single sign-on (SSO). People on an SSO domain sign in through their company’s identity provider. See Single Sign-On (SSO).
- Already listed by 10 organizations. See Limits.
Remove domains or turn off discovery
Removing a domain stops new signups on that domain from finding the organization. Current members keep their access. To turn off organization discovery, remove every domain. OneSignal does not add a domain back on its own, so the organization stays hidden until an Admin adds a domain again.Limits
- Matching organizations shown: a signup sees at most 10 matching organizations. If more than 10 organizations list the signup’s email domain, OneSignal shows no list. Instead, it asks the person to get an invite link from a teammate or to create a new organization.
- Organizations per domain: you cannot add a domain that 10 organizations already list.
- Apps when approving a Team Member: up to 50 apps.
Organizations with single sign-on
An organization whose SSO covers a signup’s email domain is not shown to that signup. People on that domain sign in through SSO instead. See Single Sign-On (SSO).Audit log events
Join requests and discovery domain changes appear in your organization’s audit logs. See Organization discovery events for the full list.FAQ
Why didn’t my teammate see our organization when they signed up?
The most common cause is that their email domain is not in your discovery domain list. Check Organization settings > Security > Organization discovery. Matching is exact, soeu.acme.com must be listed separately from acme.com. Discovery also does not show organizations to people who sign up with a personal email address, who already have an invitation, or whose domain is covered by your organization’s SSO.