# Email Auto-Provisioning

## Overview

To facilitate the onboarding of Keeper to users based on their email address domain and a Master Password, use the Email Provisioning method. This can be used for organizations that are deploying Keeper to a large number of users (such as a university) where the admin is not explicitly inviting the user to sign up.

For example, anyone with the email address containing the domain **acme.edu**, can be automatically provisioned to a particular node and role within the **Acme EDU** Keeper Enterprise account upon creating their vault.

{% hint style="info" %}
Email provisioning is only recommended for users setting up a Master Password authentication method. SSO-enabled nodes **do not** require an email provisioning method.
{% endhint %}

### Configuration

**(1)** Login to [t](https://keepersecurity.com/console)he Keeper Admin Console

**(2)** If you don't already have a Node created for this provisioning method, please create one by clicking "Add Node".  Provisioning is not permitted in the root node.

**(3)** In the new node, click on **Provisioning** **>** **Add Method**

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FQGTnAqoBU96bG4AkAQIg%2Fimage.png?alt=media&#x26;token=add48ffc-9d94-49ce-9e08-9386d319b41b" alt=""><figcaption></figcaption></figure>

**(4)** Select **Email Auto-Provisioning** then **Next**

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FTiblnyvcNXbErLjusuaK%2Fimage.png?alt=media&#x26;token=77eb6223-2fef-4c99-96f3-7d1eb8d1283e" alt=""><figcaption><p>Email Auto-Provisioning</p></figcaption></figure>

**(5)** Choose a method of domain name ownership.  You can use DNS lookup or HTML file upload.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FAkoRiPB2rGeRxi2nFNzK%2Fimage.png?alt=media&#x26;token=598c854e-4e31-40e0-9661-b2dba18a21b2" alt=""><figcaption></figcaption></figure>

**(6)** Once verification is complete, the status will show the email domain.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2FRIKGjVLFQ3hBDNBbENoz%2Fimage.png?alt=media&#x26;token=6e45841f-689b-4d3c-9770-e79fb8c1bfc7" alt=""><figcaption></figcaption></figure>

### Inviting Users

When using the email provisioning method, the easiest way to invite users to sign up is to provide them a link to the vault:

US Data Center:\
<https://keepersecurity.com/vault>

EU Data Center:\
<https://keepersecurity.eu/vault>\
\
AU Data Center:\
<https://keepersecurity.com.au/vault>

CA Data Center:\
[https://keepersecurity.com.](https://keepersecurity.com.au/vault)[ca/vault](https://keepersecurity.ca/vault)

JP Data Center:\
<https://keepersecurity.jp/vault>

Users simply click "Set up now" and use your company email to create your vault.

<figure><img src="https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2Fpgw8fXXyvxuU2U007Wgg%2FScreen%20Shot%202023-03-06%20at%2011.36.26%20AM.png?alt=media&#x26;token=da78062a-d1ea-4e25-a61e-b9ce68c3a301" alt=""><figcaption><p>EnterYour Email Address</p></figcaption></figure>

The user types in their email and clicks "Next".

![](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2Fgit-blob-8347e5c7f26f9e1629f286b96c384372520f7e79%2FScreenshot%202020-09-09%20at%2016.36.12.png?alt=media)

User will set a Master Password.

![Master Password](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2Fgit-blob-2f73ce5316260517b2106c498edabc4b214b6c65%2FScreenshot%202020-09-09%20at%2016.35.47.png?alt=media)

After the user confirms their email with a verification code, the user will be provisioned to the specified Node and Default Role in the Admin Console.

![Email Verification](https://4290574019-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LO5CAzpxoaEquZJBpYz%2Fuploads%2Fgit-blob-b48cc43c58b78f8b5264f9d1dc62406c00cd3a56%2FScreenshot%202020-09-09%20at%2016.35.57.png?alt=media)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/en/enterprise-guide/user-and-team-provisioning/email-auto-provisioning.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
