# Invitations

> Invite colleagues to your organisation in komplai, choose their role, tools and sign-in method, and follow each invitation until it is accepted.

People join your organisation in komplai only by invitation. komplai invites your first administrator when your organisation is set up. After that, your administrators invite colleagues from the hub.

## Invite a colleague

1. Open **Organisation › People › Members** (`/team`) and choose **Invite a colleague**.
2. Enter the colleague's **Email address**.
3. Choose a **Role**.
4. Under **Access when the invitation is accepted**, tick the tools the person gets. All the tools your organisation has are ticked to start with. A guest gets no tools, so the list is hidden for guests.
5. To use another sign-in method than your organisation's default, open the **Sign-in** line above **Send invitation** and choose a **Sign-in method**.
6. Choose **Send invitation**.

### Roles

| Role | What the person can do |
| --- | --- |
| Member | Use the tools you give them access to. |
| Admin | Invite colleagues and change the organisation's settings. |
| Guest | Gets no access to tools or the API. |

### Who you can invite

- If komplai has registered your organisation's email domains, members and admins need an address on one of them. Guests can have any address. [Contact us](https://en.komplai.dk/#kontakt) if a domain should be added.
- An email address can have one pending invitation at a time.
- Your organisation can send 20 invitations per hour.

### Sign-in methods

| Method | What the invited person does |
| --- | --- |
| Password | Chooses a password when accepting. |
| Passkey | Asks komplai's sign-in to email a setup link, registers a passkey from that email, then signs in and accepts. |
| Organisation sign-in (SSO) | Signs in with your organisation's own account. The connection must be set up first; see [Sign-in with Entra ID and AD FS](https://developers.komplai.dk/guides/entra-id-ad-fs). |

You set the default under **Default invitation method** on **Organisation › Sign-in and security › Sign-in** (`/settings/sso`). People who already have an account keep the sign-in method they have.

## What the person receives

An email from komplai, in Danish, saying that you have invited them to your organisation in komplai. It names the tools the invitation gives, and its link works for 7 days. Replies go to your email address.

## Accepting

The link opens a page that welcomes the person to your organisation. What happens next depends on the sign-in method:

- **Password**: the person enters their first name, last name and a password that meets the rules listed under the field, and komplai signs them in. If two-factor authentication is required for their role, they first scan a QR code with an authenticator app on their phone and enter the six-digit code. They can choose **Use a security key instead** and set up the key at their first sign-in.
- **Passkey**: the person enters their name and chooses **Send passkey setup**. They open the link in the email from komplai's sign-in, register a passkey, then sign in and accept the invitation.
- **Organisation sign-in (SSO)**: the person enters their name, chooses **Sign in** and signs in with your organisation's account.
- **An existing account**: someone who already has a komplai account, for example in another organisation, chooses **Accept invitation** and signs in as usual.

When the invitation is accepted, the person becomes a member with the role you chose and gets the tools you ticked. A ticked tool outside your agreement is assigned when the agreement covers it. Signing in then opens your organisation, even for someone who belongs to other organisations.

A link that has expired, been revoked or already been used shows **This invitation isn't valid**. The person then asks you for a new invitation.

## Follow up on invitations

**Organisation › People › Invitations** (`/team/invitations`) lists every invitation with **Email address**, **Role**, **Method**, **Invited by**, **Status** and **Expires**. Search by address, or filter by status.

| Status | Meaning |
| --- | --- |
| Pending | Sent and not accepted. The link works until the date under **Expires**. |
| Accepted | The person has joined. |
| Expired | The person opened the link after the date under **Expires**. |
| Revoked | Withdrawn by an administrator. |

For a pending invitation:

- **Resend** emails a new link that works for 7 days, also when the date under **Expires** has passed. The link in the earlier email stops working, and the new email says so.
- **Revoke** stops the link at once.

An expired or revoked invitation cannot be resent: invite the person again from **Members**. If the hub says an invitation was created but its email could not be sent, choose **Resend** here. Invitations that komplai sent show komplai under **Invited by**.

## After someone has joined

- Change a person's role, or remove them, on **Members** (`/team`). A person who becomes a guest, or is removed, loses their tools, and their API keys for your organisation stop working. Your organisation always keeps at least one administrator.
- Give or take away tools later on **Tool access** (`/settings/apps`).
- A member who uses a tool through the API creates their own personal API key (`kp_live_...`) under **APIs and integrations** (`/api-access`). The key is bound to the person and your organisation. See [API keys and authentication](https://developers.komplai.dk/authentication).

---

https://developers.komplai.dk/guides/invitations