Sometimes you want a forum to be restricted to certain users. Maybe you only want your employees to access it, a set of beta testers, or your own customers. We'll walk you through how to set this up.
Make a forum Private
- Click the icon in the bottom left corner
- Click "General Settings"
- Click "Ideas"
- Click "Forums"
- Click "Edit" for the forum you want to make private
- Check the option to "Make this forum private"
Once private, you will have an option to edit the "Access Denied" message for the forum to show to users who don't have access
- SSO and SSO SAML
- Email Domain
- IP Address
- Email address (you can invite specific email addresses to the account)
Invite Users by Email Address
You can invite individual email addresses to access your private forum. This works well for forums used for beta tests and smaller user groups. It's also an easy way to get started with a private forum.
- Once you make your forum private, click the link to "Manage Authorized Users" → Click the "Invite Users" tab.
- You can enter individual email addresses, or bulk upload a list.
- You’ll be given the option to create a customized invitation message.
- You can also use a custom "reply-to" address. Please note: this does not affect the "from" address which will always be "firstname.lastname@example.org". There is not a way to set the "from" address.
- Users will receive your invitation with a link to the forum. They will need to click the link in the email to confirm their email address, and then they will be prompted to create a password. Users must have a confirmed email address and password before they will be able to view the private forum.
SSO and SSO SAML
If you have Single Sign-On (SSO) set up, you can grant access to your private forums through SSO. When your SSO users sign in, they will automatically be given access to the forum.
With SSO, you can also grant or deny access to specific forums in the token. This section of our documentation walks through how to do this. We do not have this option available for SSO SAML.
When granting access by email domain, users must confirm their email address, and create a password before they can view the forum.
In the forum settings, enter the email domains you want to grant access to (be sure to enter example.com, not @example.com).
Here's how the process works for new users:
- Send them the URL of the Private Forum.
- When they arrive on the page, they will need to enter their email address and click “Sign Up.”
- They will get a message that says they don’t have access to the forum because their email address is unconfirmed.
- They will need to check their email inbox and click on the link in the confirmation email, which will walk them through creating their password, so they can access the forum.
- If a user already has a confirmed email and password, they will see the forum on the home page in the sidebar menu.
- If the user does not yet have a password or confirmed email, they will see the forum name in the right-hand sidebar. If they click the forum name, they will be prompted to confirm their email and create a password before gaining access.
Grant Users Access by IP Address
This is especially useful if you’re using your forum for internal purposes. Enter the approved IP addresses, and save your settings. Please note that the IP range must be defined according to this specification.
Users who come from an approved IP address will be able to sign in with just an email address to access the private forum.
Use One or All Access Settings
Many companies use just one privacy setting, but you can use multiple if you want.
- You can allow ANY of the following options, so users can sign in with SSO, from an authorized IP or from an approved email domain.
- You also have the option to require ALL of the authentication options, so users must sign in with SSO, and an approved email domain.
What about inviting users by email address? When you invite a specific email address to a forum, it is always an "OR" option. So the user must meet your other access restrictions OR their email address must have access.