# Invite and enable employees

> Invite people or let them join, check they arrived as the right person, and enable employee access.

Audience: Workspace administrators and invited employees

Kind: How-to guide

Canonical: https://shuffl.ai/docs/employee-access

<a id="ways-in"></a>
## How people get in

People arrive four ways: from Slack, from a directory sync or SCIM provisioning, by joining with a verified email domain, or through Invite and Add person.

App access on each row says where someone stands, such as Active, Access pending, Invited or Suspended. A Not invited row has its own Invite button.

Someone who accepts an invitation or joins with a verified email domain gets access straight away. Everyone else waits under Members awaiting access until an administrator or a directory policy enables them.

<a id="invite"></a>
## Send and accept an invitation

1. Administrator: open People and choose Invite. Paste work emails or add people from the directory, choose Employee or Administrator and select Send invitation.

2. Pending invitations lists open ones to copy or cancel.

3. Invite all, beside Invite on People, invites as employees everyone in the directory with an email and no account or pending invitation.

4. Employee: follow the invitation link, sign in or create an account with the invited email, and verify it. Choose Accept invitation.

5. The invitation page says whether the link is ready, expired, sent to a different account or already accepted.

6. Accepting joins the company and the workspace named in the invitation and turns your access on.

7. If an administrator suspended or denied access earlier, you see Your access is pending, with Check again.

- [Invite people](https://shuffl.ai/app/people?invite=1)

<a id="link"></a>
## Enable access for the right person

1. Administrator: open People and choose Review access under Members awaiting access.

2. Shuffl links each account to the person with the same work email, or offers Create employee profile. If two people share the email, pick the right one.

3. To move an account to a different person, open the person, expand Connected accounts, choose Disconnect app, then open the right person and choose Link app account.

4. Expand Employment and access, enable Employee access, enter a reason and choose Save access. Enable access for N people enables waiting Slack members at once.

5. Employee: reopen the workspace and try Chat. Once your Slack account is linked too, Slack chats show in your web history.

- [Open People](https://shuffl.ai/app/people)

- [Open Chat](https://shuffl.ai/app/chat)

<a id="email-domains"></a>
## Let people at your company join by email domain

In Settings → Workspace → Integrations → Email domains, choose Add a domain and add the DNS record Shuffl shows at your registrar, then Check DNS record.

Once Verified, anyone who signs in with that domain joins the company’s default workspace with access. Remove a domain to stop new joins.

- [Open Email domains](https://shuffl.ai/app/settings/company/domains)

<a id="provisioning"></a>
## Provision people from your directory

People → Sync connects HR systems and directories with a key or a sign-in and reads them daily, or when the provider sends a change. Shuffl never writes back.

Settings → Workspace → Integrations → Provisioning takes a SCIM 2.0 connection from Okta, Microsoft Entra ID, OneLogin, JumpCloud or another provider.

Choose New SCIM connection, copy the base URL and token into your identity provider and assign people or groups. Rotate tokens within 90 days.

Under Who gets workspace access choose Everyone assigned to this app or Selected groups only; until you do, people arrive suspended in the default workspace. Removing someone in your identity provider takes effect at once; restoring them doesn’t undo a manual suspension.

To bring a pushed group into People → Groups, choose Groups on the SCIM card under People → Sync and turn it on.

It comes into every workspace of the company, marked From provisioning, with members following your identity provider. Turned off, it stays as a list.

- [Open Sync](https://shuffl.ai/app/people?view=sync)

- [Sync people from your HR system](https://shuffl.ai/docs/people-sync)

<a id="single-sign-on"></a>
## Sign in with your identity provider

In Settings → Workspace → Integrations → Single sign-on, choose Add connection, pick SAML or OpenID Connect and verify it with its DNS TXT record.

The dialog has steps for common providers and shows the values they ask for. SAML assertions must be signed with SHA-256.

Single sign-on proves who someone is; People still decides who gets in. It admits someone only when the default workspace lists exactly one person with that email and enabled access. Password sign-in keeps working while you test.

Everyone can also add a passkey or an authenticator app under Settings → Account, whichever way they sign in.

- [Open Single sign-on settings](https://shuffl.ai/app/settings/company/sso)

<a id="recover"></a>
## Recover invitation or access problems

An expired or cancelled invitation needs a new one. An administrator who sees You’re not in People yet can choose Add me to People.

A personal email is a different account: invite the work email or link it. Suspended usually means a deactivated Slack account or ended employment; the access card says why.

- [Find a recovery step](https://shuffl.ai/docs/troubleshooting)

## Related guides

- [Set up your workspace](https://shuffl.ai/docs/getting-started)

- [People and the org chart](https://shuffl.ai/docs/people)

- [Share a request with HR](https://shuffl.ai/docs/hr-requests)

- [Set up single sign-on and directory provisioning](https://shuffl.ai/docs/single-sign-on)

- [Sync People from your HR system](https://shuffl.ai/docs/people-sync)

Agent documentation index: https://shuffl.ai/llms.txt