# Inviting users to your organization

Admins can invite new users to their organization directly from the *Users & Groups* section of the settings: in the *Users* tab, click on the *Invite user* button. A new dialog will appear allowing you to enter the email address(es) of the prospective users as well as their [role](https://docs.carto.com/carto-user-manual/settings/users-and-groups/managing-user-roles) (they will be *Editors* by default).

<figure><img src="https://3029946802-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FybPdpmLltPkzGFvz7m8A%2Fuploads%2Fgit-blob-188d696ae1d9d637ca08540cf88cf32369b562b4%2Fsettings_list_of_users.png?alt=media&#x26;token=6d18f8d5-e668-434a-b4a2-3d5f79da23f6" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3029946802-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FybPdpmLltPkzGFvz7m8A%2Fuploads%2Fgit-blob-0a91fd76eab2ed2ef9a742abf10d20256ed7609b%2Fsettings_invite_user_initial_dialog.png?alt=media&#x26;token=106b4e1c-ba36-4d4c-829f-7a6066362d06" alt=""><figcaption></figcaption></figure>

### Managing invitations

Admins can view and manage all existing invitations in the Invitations tab under the *Users & Groups* settings. From here, admins can:

* See existing invitations and their status (whether they are pending, accepted or expired).
* Withdraw pending invitations.
* Resend pending or expired invitations.

<figure><img src="https://3029946802-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FybPdpmLltPkzGFvz7m8A%2Fuploads%2Fgit-blob-8096ed321951165b93654b2e9036d5d0bed8fe7a%2FScreenshot%202024-08-20%20at%2018.45.52.png?alt=media" alt=""><figcaption></figcaption></figure>

{% hint style="danger" %}
Pending invitations expire seven days after being sent. Once expired, a new user cannot be created with that invitation. However, admins can resend expired invitations.
{% endhint %}

### Automatic user enrollment with matching email domain (Auto-join)

**Auto-join** allows users with your organization's email domain (like @company.com) to sign up and automatically join your organization without an invitation.

Admins can enable this feature in the **Authentication & SSO** section of the Settings. Once enabled, any user who signs up with a matching email domain will be automatically added to the organization.

<figure><img src="https://3029946802-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FybPdpmLltPkzGFvz7m8A%2Fuploads%2Fgit-blob-5a629ba5e1760fe53c4ca1eca46c170d55e3872f%2FScreenshot%202025-07-15%20at%2015.24.11.png?alt=media" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Autojoin based on matching email domain is disabled for organizations using [Single Sign-On](https://docs.carto.com/carto-user-manual/settings/sso) (SSO).\
\
By default, organizations using SSO have an equivalent mechanism where users with valid SSO credentials (i.e., approved by your company's Identity Provider) can automatically join the organization. This process can be further streamlined with [Just-in-Time Provisioning](https://docs.carto.com/carto-user-manual/sso#just-in-time-provisioning).
{% endhint %}