This article provides answers for a feature that is currently available to a limited group of InVision V6 Enterprise organizations. If you belong to an InVision V7 Enterprise, read this article instead.
InVision Enterprise provides a central hub for your organization’s work and collaboration. Content in the Enterprise account can be secured to company standards as well as managed and monitored by Enterprise admins.
Despite having an Enterprise InVision account, you might find that individual employees continue to sign up for and work in a completely separate personal InVision account using a personal email. This can potentially leave the Enterprise without direct visibility or control over any company assets the user unintentionally syncs to the personal account. Domain control gives Enterprise teams a way to help prevent this.
How does domain control work?
You must be an admin or owner of the Enterprise to submit domains for verification.
Domain control helps protect your Enterprise assets by identifying and preventing employees of the organization from signing up for personal accounts using email domains controlled by your organization.
Remember, anyone who belongs to an InVision V6 Enterprise can also access a personal work area. While enabling domain control for the Enterprise will not delete this personal work area, it drastically reduces the likelihood of anyone unintentionally working on Enterprise projects from their personal area.
To enable domain control, you’ll need to reach out to your InVision Enterprise account team to see if this feature is available to you. If your team is eligible, you can provide a list of the corporate email domains (e.g.,
@your-company.com) you want to control.
Your InVision Enterprise account team will verify your ownership of these domains and enable domain control for your Enterprise. Only domains owned or controlled by your organization may be submitted for domain control.
After domain control is established, anyone who tries to create a separate InVision account using the corporate email address associated with the Enterprise will be prompted to request access to the Enterprise account instead.
Once the new user requests access to the Enterprise, the Enterprise owner will receive an email with a link to invite that user to the Enterprise team.
What if my Enterprise has more than one corporate email domain?
Your Enterprise can control multiple domains if needed. Simply provide your InVision Enterprise account team a list of all domains you need to verify. Once InVision Support has verified each domain, anyone using an email for one of your controlled domains will be unable to create a new account and will, instead, get directed to request access to the Enterprise.
What if my company uses more than one InVision Enterprise account (i.e., multiple subdomains)?
Let your InVision Enterprise account team know which subdomains you want users to be able to request access to. If multiple Enterprise accounts are mapped to the same corporate domain, during the InVision sign-up process, anyone with an email from that domain will be prompted to request access to one of the Enterprise accounts.
To avoid potential confusion, we recommend limiting the number of Enterprise accounts that control your domain.
What if my Enterprise uses SSO? Can users still request access?
During the InVision sign-up process, any user with a controlled email domain will see teams with SSO enabled; however, rather than getting prompted to request access, they’ll be prompted to sign-in via SSO. And, depending on your SSO configuration, users can either be auto-provisioned to your team or redirected to your internal access provisioning workflow.
Is there any way users can still create personal accounts with corporate email addresses?
Users typically create personal accounts when they sign up for InVision from the homepage, most often because they’re unaware their company even has an Enterprise account. Domain control helps solve this problem.
To support cross-team and cross-company collaboration use cases, however, employees with Enterprise-controlled emails will still be permitted to use the controlled email to accept invites to collaborate with non-Enterprise accounts. Additionally, users who are added but later removed from the Enterprise will be left with only access to a personal InVision account.