> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dune.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Google SSO Domain Restriction

> Restrict team join requests via Google SSO to the admin's email domain.

<Note>
  **Enterprise Feature** — Domain-restricted SSO is available on the [Enterprise plan](https://dune.com/enterprise). [Contact sales](https://dune.com/enterprise) to learn more.
</Note>

<Info>
  If your teams are under a Dune **[organization](/web-app/organizations)**, manage Google SSO domain restriction in **organization settings → Security**. Team-level Security does not control this for those teams.
</Info>

Dune can restrict **Google SSO join requests** so that only users with an email address on an approved domain can join your team.

## How the allowed domain is determined

The **allowed domain is automatically set to the email domain of the team admin** who enables the setting.

Example:

* If the admin enabling the setting has `admin@dune.com`, then the allowed domain will be `dune.com`.

## What this setting does

When enabled:

* Only users signing in with Google SSO using the **allowed domain** can join the team.
* Users attempting to join with a different email domain will be blocked.

This is useful to prevent personal Gmail accounts (or other unapproved domains) from joining your team.

## Before you enable this

> **Important:** You must remove any existing team members whose email domain does **not** match the admin’s domain **before** enabling this setting.

Also note:

* While enabled, **users cannot change their email address** in Dune.
* Users who previously used **email/password** will be prompted to sign in using **Google SSO**.

## Enable Google SSO domain restriction

1. Go to **Settings → Security & Privacy → Google SSO domain restriction**.
2. Toggle **Restrict Google SSO** on.
3. **Authenticate** your email domain.

Once enabled, Dune will display the allowed domain (for example: `dune.com`) in the setting.