Skip to main content

Self invite

Self invite lets your users connect their own device to your organization from within the XFA app, instead of waiting for you to send each of them an invitation. A user enters their work email, confirms it with a one-time code, and, if they're eligible, connects their device.

Use it to speed up rollout: point people at the app, and they onboard themselves.

Enabling self invite

  1. In the XFA dashboard, open the Awareness settings.
  2. Turn on Allow self invite.

The toggle applies to the whole organization. It is not limited by the group or device filters used elsewhere in Awareness.

Don't see the toggle?

Self invite is enabled per account. If Allow self invite doesn't appear in your Awareness settings, contact XFA to have it turned on for your organization.

What to expect

  • Users can onboard without an admin invitation. Anyone whose work email is recognized as eligible for your organization can connect their device from the app once self invite is on.
  • Email is always verified first. A user must confirm ownership of their email with a one-time code before anything is revealed or connected. XFA sends a code for any valid email address, so which organizations an email belongs to is never exposed to someone who can't receive that email. This prevents using the app to enumerate which companies use XFA.
  • Abuse is rate limited. The number of codes a device can request is capped per hour and per day.
  • Connected devices behave like any other. A self connected device shares its security status and follows your organization's policy exactly as an admin invited device does. You can see and remove it from the dashboard like any other device.

When self invite is off

If Allow self invite is turned off, users cannot connect themselves:

  • A user with a pending invitation is told to use the invitation email you sent (or to ask you to resend it).
  • A user with no invitation is told that the organization doesn't allow connecting yourself and to contact their administrator.

You keep inviting devices the usual way. See Create an organization and the invitation flow.

For your users

Share the end-user walkthrough so people know what to do in the app: Connect to an organization.