System Admin Guide
Set Up & Security
If you're setting up Workplace for your organization, visit the Workplace Set Up Guide for step-by-step instructions to get your Workplace up and running fast.Verify your corporate email domain:
Verifying your Workplace domain makes your Workplace account official for your entire organization and prevents other people with the same email domain from creating other, separate Workplaces. Domain verification also allows you to:
- Enable Single Sign-On
- Edit personally identifiable information
- Send users notifications prior to their profiles being activated
If you choose not to verify your domain, you also have the option to allow list it. Allow listing your domain allows other people with the same email domain to create separate Workplace accounts. If you choose to allow list your domain you can still verify it at any time.
Learn how to verify or allow list in the Workplace Technical Resources.Allowlist domains used by Workplace:
Since Workplace is built on the same technology that powers Facebook, any domain restrictions your organization put in place to prevent network access to Facebook will also block access to Workplace. Visit the Technical Resources to learn how to unblock domains, ports, and IP ranges.Add Workplace email domains to a safe sender list
Workplace will send emails to your users to invite them to claim their accounts and to notify them of posts made that mention them. Your email administrator must add fbworkmail.com as a safe sender to your email host, so that people can receive claim account emails and join Workplace. The Technical Resources outline the steps you need to take to ensure your staff can receive emails from Workplace.Branding:
Admins can add or remove users from Workplace using the following methods:
- Manually: add new users individually.
- In Bulk: add users in bulk using a spreadsheet.
- Automated: connect Workplace to your Cloud Identity Provider or directly from Active Directory.
Select Authentication from the Security page of the Admin Panel. This is where you can decide how you want your users to log into Workplace. You can select password, Single Sign-On, or both.
Visit the Authentication section of the Workplace Technical Resources for more information on authentication. For a quick overview of Single Sign-On, watch the video below.Invite Preferences:
Choose from the following admin invite settings to control who can join your Workplace:
- Only people who are invited can join: meaning that others can only join if invited by an admin or an active user.
- Anyone from the following email domains can join: meaning anyone from a verified or allow listed domain can join without being invited.
Any user can either add or request to add a new employee depending on your access request settings. Admins can choose from three access request settings to choose how new users are approved to join your Workplace:
- Admins must approve all requests to join this Workplace: Any invite sent by a non-admin must be approved by an administrator.
- Automatically approve requests from these email domains: Choose this option if you want to make your Workplace open to any person with a corporate email address from any of the domains you verified or allow listed.
- Automatically approve all requests: Any new user can join Workplace without admin approval.
One of the core functions of a System Administrator is to set up and manage integrations with other systems. We know your organization might already have tools you use every day to get work done. Integrating these tools with Workplace is easy. Browse the Integrations Directory to find the tools you'd like to connect. Once you download a tool it will be accessible to all members of your organization.
Learn more about available integrations by watching the video below.