CHW-1107 SSODomainNotAllowed
your email domain is not allowed for this organization
Copies the raw Markdown source of this guide, for pasting into an LLM or notes.
Default message: your email domain is not allowed for this organization
HTTP status:403(client)
Problem. The IdP returned a verified email whose domain is not on
the org’s allowed_domains allow-list. Cause. Users from this
domain are not permitted to sign in via this org’s SSO configuration,
even though the IdP accepted them. Fix. Ask an org admin to add
the domain to allowed_domains, or use an account with an allowed
domain. HTTP 403.