diff --git a/docs/docs/guides/manage/console/organizations.mdx b/docs/docs/guides/manage/console/organizations.mdx index 15841397f..3ac96e75b 100644 --- a/docs/docs/guides/manage/console/organizations.mdx +++ b/docs/docs/guides/manage/console/organizations.mdx @@ -9,7 +9,7 @@ import OrgDescription from "../../../concepts/structure/_org_description.mdx"; import Column from "../../../../src/components/column"; An Organization is where your projects and users live. Looking at a B2B use case, an organization represents a business partner who typically has its own branding and has different access settings like additional federated login providers. -Users from one organization are seperated from others. +Users from one organization are separated from others. ## Create a new organization @@ -23,7 +23,7 @@ If you choose your logged in user as organization manager, a membership for the alt="Select Organization" /> -If you want to enable your customers to create their organization by themselves, we provide a creation form for a organization. ` Note: You can set this setting on your instance as well as your organizations. All available usernames are shown on the top of the user pages. @@ -59,12 +59,14 @@ Users that you create within your organization will be suffixed with this domain You can improve the user experience, by suffixing users with a domain name that is in your control. If the "validate org domains" settings in the [Domain Settings](./instance-settings#domain-settings) is set to true, you have to prove the ownership of your domain, by DNS or HTTP challenge. -If the settings is set to false, the created domain will automatically be set to verifed. +If the setting is set to false, the created domain will automatically be set to verifed. An organization can have multiple domain names, but only one domain can be primary. The primary domain defines which login name ZITADEL displays to the user, and what information gets asserted in access_tokens (`preferred_username`). -Please note that domain verification also removes the logonname from all users, who might have used this combination in the global organization (ie. users not belonging to a specific organization). Relating to our example with acme.ch: If a user ‘coyote’ exists in the global organization with the logonname coyote@acme.ch, then after verification of acme.ch, this logonname will be replaced with `coyote@{randomvalue.tld}`. ZITADEL will notify users affected by this change. +Please note that domain verification also removes the login name from all users, who might have used this combination in the global organization (ie. users not belonging to a specific organization). +Relating to our example with acme.ch: If a user ‘coyote’ exists in the global organization with the login name coyote@acme.ch, then after verification of acme.ch, this login name will be replaced with `coyote@{randomvalue.tld}`. +ZITADEL will notify users affected by this change. ## Verify your domain name