> ## Documentation Index
> Fetch the complete documentation index at: https://stytch.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Invite members

> Invite Members to an Organization via email invitation.

export const jit_provisioning = "Just-in-time provisioning: allow new Members to be added to an Organization as soon as they authenticate, based on email domain or SSO connection.";

export const member = "Represents an individual end user's account within a given Organization, uniquely identified within that Organization by their email address.";

export const organization = "Represents an instance or tenant in your application, typically mapping to each of your top-level customers.";

<Tooltip tip={organization}>Organizations</Tooltip> can allow new <Tooltip tip={member}>Members</Tooltip> to join via **explicit email invitation** or [just-in-time (JIT) provisioning](/multi-tenant-auth/enterprise-ready/org-management/jit-provision-members).

The right solution depends on the Organization's use case:

* To reduce friction to joining an Organization, <Tooltip tip={jit_provisioning}>JIT provisioning</Tooltip> is a simple way to ensure that new Members are added to their company's Organization as soon as they authenticate.
* If admins of your product need more control over who gets access to their Organization, they may want to restrict to email invites, or JIT provisioning by a specific OAuth tenant.

Often, the right solution will vary by Organization.  To learn about how to enable Organizations to manage their own provisioning settings, see the [Admin Portal](/multi-tenant-auth/enterprise-ready/admin-portal) guide.

## Inviting Members via email

Enable **inviting Members via email** to allow Organization Members to invite new Members to the Organization via email invitation.

Using the [Update Organization](/api-reference/b2b/api/organizations/update-organization) endpoint:

* Set [`email_invites`](/api-reference/b2b/api/organizations/update-organization#body-email-invites) to either:
  * `RESTRICTED` to allow specific email domains to be invited to the Organization
  * `ALL_ALLOWED` to allow any email domain to be invited to the Organization
* If `RESTRICTED`, specify which email domains should be allowed with [`email_allowed_domains`](/api-reference/b2b/api/organizations/update-organization#body-email-allowed-domains).

<CodeGroup>
  ```bash cURL icon="https://d3gk2c5xim1je2.cloudfront.net/devicon/bash.svg" theme={null}
  curl --request PUT \
    --url https://api.stytch.com/v1/b2b/organizations/{organization_id} \
    --header 'Authorization: Basic <encoded-value>' \
    --header 'Content-Type: application/json' \
    --data '{
      "email_invites": "RESTRICTED",
      "email_allowed_domains": ["companyname.com"],
    }'
  ```

  ```python Python icon="python" theme={null}
  client.organizations.update(
    organization_id="organization-test-07971b06-ac8b-4cdb-9c15-63b17e653931",
    email_invites="RESTRICTED",
    email_allowed_domains=["companyname.com"],
  )
  ```

  ```javascript Javascript icon="js" theme={null}
  client.organizations.update({
    organization_id: "organization-test-07971b06-ac8b-4cdb-9c15-63b17e653931",
    email_invites: "RESTRICTED",
    email_allowed_domains: ["companyname.com"],
  })
  ```
</CodeGroup>

<Accordion title="Disallowed common email domains">
  Stytch disallows setting certain common email domains on the `email_allowed_domains` array:

  * `gmail`
  * `aol`
  * `yahoo`
  * `icloud`
  * `hotmail`
  * `msn`
  * `comcast`
  * `live`
  * `outlook`
  * `att`
  * `earthlink`
  * `me`
  * `mac`
  * `sbcglobal`
  * `verizon`
  * `ig`
  * `mail`
  * `hey`
  * `laposte`
  * `wanadoo`
  * `googlemail`
  * `orange`
  * `rediffmail`
  * `uol`
  * `bol`
  * `free`
  * `gmx`
  * `yandex`
  * `ymail`
  * `libero`
</Accordion>