E-mail domain mapping

E-mail domain mapping allows admins to map e-mail domains to specific user groups, to allow for more flexible configuration options when your company's AD has a restricted set of groups.

It is possible to map e-mail domains to user groups. On login, the groups will be added to a user. This is particularly convenient when you don't want to add extra groups in your company's Active Directory.

Let's say that you are working with different partners. In your AD, all these users are in the group 'Partner', and in the SSO configuration, this 'Partner" group is mapped to the partner group in Kadanza.

But when you want to set specific permissions for different partners, you need specific groups for each partner. Instead of creating these groups in your AD, you can map each partners' email domain to a different group in Kadanza. Via SSO, the partners will be added to the 'Partner" group, and because of their email domain, they are added to specific partner groups.

For example,

Your setup has 4 types of partners. The general "Partner" has access to most content, but partner A, B and C have access to extra content that only users from this partner should have access to. This means that specific groups and permissions should be configured in Kadanza.

In the company AD, only 1 partner group (Kadanza_partner) was created, as there is no distinction between different partners. In Kadanza a specific group was created and mapped to the partners' email domain.

User groups in Kadanza are as follows

• Partner (mapped in the SSO configuration to the Kadanza_partner AD group)
• partnerA
• partnerB
• partnerC

When a user logs in, the mapped user groups are added to the user record.