From 856c3bba6e9ea508f3dc7c38534f78aea9bae5ea Mon Sep 17 00:00:00 2001 From: Olaf Joppe Date: Sun, 25 May 2025 10:03:13 +0200 Subject: [PATCH 1/5] Update security.md --- .../en/docs/control-center/security/security.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/content/en/docs/control-center/security/security.md b/content/en/docs/control-center/security/security.md index c9560482774..1111116551b 100644 --- a/content/en/docs/control-center/security/security.md +++ b/content/en/docs/control-center/security/security.md @@ -33,6 +33,23 @@ Digital signing of email content contributes to security, so why would you want Digital signing might interfere with other email safety measures like “External Email Warning”. This feature might add a customized HTML warning to the email. Since Mendix emails cannot be altered, some email servers will wrap the original message in a blank email and add the original email as an attachment. This is not beneficial for the experience of the user and will make the emails look suspicious, impacting user engagement. Also, it makes searching for emails with specific text content more difficult for users. +### Allow External User Invites to project + +By default, members outside your organization can be invited to collaborate on projects. + +However, if your IT policy requires that only individuals with a [company email](/control-center/company-settings/#company-email-domains) address (i.e., one that matches your company’s domain) work on projects, you can disable this feature. + +{{% alert color="info" %}} +**Note:** Disabling this option will block invitations to any email addresses outside your company domain. Attempts to invite such users will result in an error. +{{% /alert %}} + +Existing external collaborators will **not** be affected by this change. You can manually remove them at any time from the [External Members](/control-center/members/#external-members) page. + +If you need to make an exception and temporarily invite an external member: +1. Re-enable external invitations. +2. Add the external member. +3. Disable the setting again to reinstate the restriction. + ### Application Data Replication {#application-data-replication} {{% alert color="info" %}} From 4a2aae9b4ed1ac21c656270b77f09328e46e3e43 Mon Sep 17 00:00:00 2001 From: Olaf Joppe Date: Sun, 25 May 2025 10:07:02 +0200 Subject: [PATCH 2/5] Update _index.md --- content/en/docs/developerportal/general/team/_index.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/content/en/docs/developerportal/general/team/_index.md b/content/en/docs/developerportal/general/team/_index.md index 7aed30450b2..63f8f8e96bf 100644 --- a/content/en/docs/developerportal/general/team/_index.md +++ b/content/en/docs/developerportal/general/team/_index.md @@ -42,6 +42,10 @@ To invite new team members, follow these steps: {{% alert color="info" %}}If you invite a Mendix user from your company to an app owned by your company, the invited user is added directly to the app's team.{{% /alert %}} +### External Invitations + +You can invite users with email addresses outside your [company domain](/control-center/company-settings/#company-email-domains), provided your company administrator has allowed this setting. If permitted, the user will receive an email invitation to join the project. + ## Read More * [App Roles](/developerportal/general/app-roles/) From 563791f7cdebbf9106187e9cdda000b273d91819 Mon Sep 17 00:00:00 2001 From: Olaf Joppe Date: Sun, 25 May 2025 10:09:49 +0200 Subject: [PATCH 3/5] Update _index.md --- content/en/docs/releasenotes/control-center/_index.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/content/en/docs/releasenotes/control-center/_index.md b/content/en/docs/releasenotes/control-center/_index.md index bd0f3c1ace2..578fa011286 100644 --- a/content/en/docs/releasenotes/control-center/_index.md +++ b/content/en/docs/releasenotes/control-center/_index.md @@ -14,6 +14,10 @@ To see the current status of the Mendix Control Center, see [Mendix Status](http ## 2025 +### May 26, 2025 + +* You can now restrict people from outside your organisation from being invited to projects. Read more about how to block external users in our documentation [here](/control-center/security-settings/). + ### May 22, 2025 * We have replaced the [Marketplace Curation](/control-center/marketplace-curation/) RECOMMENDED label with {{% icon name="checkmark-shield-filled" color="green" %}}COMPANY APPROVED. The new label indicates Marketplace components that meet company policies and guidelines. From d0e3cca14242509bf61e52f217d1133823b70d90 Mon Sep 17 00:00:00 2001 From: nicoletacoman Date: Mon, 26 May 2025 10:04:10 +0200 Subject: [PATCH 4/5] TW review --- .../en/docs/control-center/security/security.md | 15 ++++++++------- .../docs/developerportal/general/team/_index.md | 3 ++- .../en/docs/releasenotes/control-center/_index.md | 3 ++- 3 files changed, 12 insertions(+), 9 deletions(-) diff --git a/content/en/docs/control-center/security/security.md b/content/en/docs/control-center/security/security.md index 1111116551b..20e5a708107 100644 --- a/content/en/docs/control-center/security/security.md +++ b/content/en/docs/control-center/security/security.md @@ -13,7 +13,7 @@ A member in Control Center means a user of the Mendix platform who participates ## Introduction -The **Settings** page in the **Security** category in Control Center allows you to configure the security settings, manage the single sign-on configurations, and view the security history of your company. +The **Settings** page in the **Security** category in Control Center allows you to configure security settings, manage single sign-on configurations, and view the security history of your company. ## Security Settings Tab @@ -27,25 +27,26 @@ The Mendix Platform digitally signs the content of emails from senders [no-reply To disable the digital signing of emails, turn off the toggle. To enable the digital signing of emails, turn on the toggle. This setting has an effect on the emails sent to all the [email domains claimed by your company](/control-center/company-settings/#company-email-domains). -#### Why Would You Want to Disable the Digital Signing of Email Content? {#why-disable-email-signing} +#### Disabling the Digital Signing of Email Content {#why-disable-email-signing} -Digital signing of email content contributes to security, so why would you want to disable the digital signing of email content sometimes? +While digital signing of email content contributes to security, there are cases where it should be disabled. Digital signing might interfere with other email safety measures like “External Email Warning”. This feature might add a customized HTML warning to the email. Since Mendix emails cannot be altered, some email servers will wrap the original message in a blank email and add the original email as an attachment. This is not beneficial for the experience of the user and will make the emails look suspicious, impacting user engagement. Also, it makes searching for emails with specific text content more difficult for users. -### Allow External User Invites to project +### Allowing External User Invites to Projects {#allow-external-users} By default, members outside your organization can be invited to collaborate on projects. -However, if your IT policy requires that only individuals with a [company email](/control-center/company-settings/#company-email-domains) address (i.e., one that matches your company’s domain) work on projects, you can disable this feature. +However, if your IT policy requires that only individuals with a [company email](/control-center/company-settings/#company-email-domains) address, meaning an email address that matches your company’s domain, work on projects, you can disable this option. {{% alert color="info" %}} -**Note:** Disabling this option will block invitations to any email addresses outside your company domain. Attempts to invite such users will result in an error. +If you disable this option, all invitations to email addresses outside of your company domain will be blocked. Any attempt to invite such users will result in an error. {{% /alert %}} -Existing external collaborators will **not** be affected by this change. You can manually remove them at any time from the [External Members](/control-center/members/#external-members) page. +Existing external collaborators are not affected by this change. You can manually remove them at any time from the [External Members](/control-center/members/#external-members) page. If you need to make an exception and temporarily invite an external member: + 1. Re-enable external invitations. 2. Add the external member. 3. Disable the setting again to reinstate the restriction. diff --git a/content/en/docs/developerportal/general/team/_index.md b/content/en/docs/developerportal/general/team/_index.md index 63f8f8e96bf..df4f7b69a94 100644 --- a/content/en/docs/developerportal/general/team/_index.md +++ b/content/en/docs/developerportal/general/team/_index.md @@ -44,7 +44,8 @@ To invite new team members, follow these steps: ### External Invitations -You can invite users with email addresses outside your [company domain](/control-center/company-settings/#company-email-domains), provided your company administrator has allowed this setting. If permitted, the user will receive an email invitation to join the project. +You can invite users with email addresses outside of your [company domain](/control-center/company-settings/#company-email-domains), provided your company administrator has allowed this setting. If permitted, the user will receive an email invitation to join the project. +For more information, see [Allowing External User Invites to Projects](/control-center/security-settings/#allow-external-users). ## Read More diff --git a/content/en/docs/releasenotes/control-center/_index.md b/content/en/docs/releasenotes/control-center/_index.md index 578fa011286..5226d76007a 100644 --- a/content/en/docs/releasenotes/control-center/_index.md +++ b/content/en/docs/releasenotes/control-center/_index.md @@ -16,7 +16,8 @@ To see the current status of the Mendix Control Center, see [Mendix Status](http ### May 26, 2025 -* You can now restrict people from outside your organisation from being invited to projects. Read more about how to block external users in our documentation [here](/control-center/security-settings/). +* You can now restrict people from outside your organization from being invited to projects. To do that, toggle off the **External User Invites** option on the **Security Settings** tab of the Control Center **Settings** page. +For more information, see [Allowing External User Invites to Projects](/control-center/security-settings/#allow-external-users). ### May 22, 2025 From f1bdf42fb75b3e707f1d1a51eda13fc4f12cc5b4 Mon Sep 17 00:00:00 2001 From: nicoletacoman Date: Mon, 26 May 2025 12:46:35 +0200 Subject: [PATCH 5/5] Applied comments --- content/en/docs/control-center/security/security.md | 4 ++-- content/en/docs/developerportal/general/team/_index.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/content/en/docs/control-center/security/security.md b/content/en/docs/control-center/security/security.md index 20e5a708107..3c1d980be79 100644 --- a/content/en/docs/control-center/security/security.md +++ b/content/en/docs/control-center/security/security.md @@ -37,10 +37,10 @@ Digital signing might interfere with other email safety measures like “Externa By default, members outside your organization can be invited to collaborate on projects. -However, if your IT policy requires that only individuals with a [company email](/control-center/company-settings/#company-email-domains) address, meaning an email address that matches your company’s domain, work on projects, you can disable this option. +However, if your IT policy requires that only individuals with a [company email](/control-center/company-settings/#company-email-domains) address, meaning an email address that matches your company domains, work on projects, you can disable this option. {{% alert color="info" %}} -If you disable this option, all invitations to email addresses outside of your company domain will be blocked. Any attempt to invite such users will result in an error. +If you disable this option, all invitations to email addresses outside of your company domains will be blocked. Any attempt to invite such users will result in an error. {{% /alert %}} Existing external collaborators are not affected by this change. You can manually remove them at any time from the [External Members](/control-center/members/#external-members) page. diff --git a/content/en/docs/developerportal/general/team/_index.md b/content/en/docs/developerportal/general/team/_index.md index df4f7b69a94..c776f8348c8 100644 --- a/content/en/docs/developerportal/general/team/_index.md +++ b/content/en/docs/developerportal/general/team/_index.md @@ -44,7 +44,7 @@ To invite new team members, follow these steps: ### External Invitations -You can invite users with email addresses outside of your [company domain](/control-center/company-settings/#company-email-domains), provided your company administrator has allowed this setting. If permitted, the user will receive an email invitation to join the project. +You can invite users with email addresses outside of your [company domains](/control-center/company-settings/#company-email-domains), provided your company administrator has allowed this setting. If permitted, the user will receive an email invitation to join the project. For more information, see [Allowing External User Invites to Projects](/control-center/security-settings/#allow-external-users). ## Read More