If your school or district authenticates Edlio CMS users through Google SSO or Microsoft SSO, you can restrict sign-in to a specific Organizational Unit (OU) so that only the staff in that OU can log into the CMS — even if students or other users share the same directory or domain.

This setting is admin-enabled. To turn on OU-based sign-in restriction for your CMS, submit a support ticket to Edlio Support. Edlio's technical team configures this on your behalf. The steps below walk you through exactly what to send and how to submit the ticket.

Using LDAP / Active Directory? LDAP authorizes sign-in through group memberships (CN groups) within your directory, not through an OU restriction. See LDAP Configuration & Common Requests for how the LDAP integration handles group-based access.

Why restrict CMS sign-in to an OU

By default, any user who can authenticate against your directory or SSO provider can sign into the Edlio CMS. For most schools that share a single directory or domain across staff and students, this is too permissive — it means students, alumni, or any other directory user could potentially reach the CMS editing tools.

Restricting CMS sign-in to a single staff OU is the simplest way to make sure only the intended group can sign in.

Before you submit the ticket

A few things to check first — they'll save a round-trip with support:

All staff who need CMS access must already be members of the OU you intend to specify. Once the restriction is active, anyone outside that OU will be blocked from signing in.
The CMS supports one OU per site. If your staff are spread across multiple OUs today, either consolidate them into a single OU, or identify a common parent OU that contains all of them (and only them).
Placing a user in the OU does not automatically create their Edlio CMS account. They still need to be provisioned in Edlio User Management. See Add a New User for the CMS user-creation flow.

How to submit the ticket

Edlio Support tickets are submitted through Eddy, Edlio's AI support assistant, directly inside your CMS admin dashboard. Here's the full flow:

Step 1: Open Eddy in your admin dashboard

Log into your Edlio admin site and click the Eddy chat icon in the bottom-right corner of the screen.

If you don't see the chat icon, your browser may have JavaScript disabled or an ad-blocker active. See the troubleshooting steps on the Edlio support page under "Support Launcher Not Appearing."

Step 2: Describe what you need

Click Ask a Question and type a request like:

"Please enable CMS sign-in restriction to an Organizational Unit for our site."

Eddy may suggest knowledge-base articles first. If you want to skip straight to a ticket, continue the conversation — Eddy will connect you with the support team.

Step 3: Include this information in the ticket

So that Edlio Support can configure OU restriction without a back-and-forth, include:

Your authentication provider — Google SSO or Microsoft SSO.
The Organizational Unit that should have CMS access — the OU path or name as it appears in your admin console (Google Workspace Admin or Microsoft Entra ID / Azure AD).
Your school or district name.
Your website URL.

Step 4: Submit the ticket

Eddy will generate the ticket with your conversation details and hand it to the Edlio Support team. You'll receive email confirmation and can track ticket status from the Tickets panel inside Eddy.

Step 5: Confirmation from Edlio

Edlio Support will enable OU-based sign-in restriction for your site and confirm with you once it's active. Before you announce the change to staff, test with one account inside the OU and one outside to confirm the behavior matches what you expect.

After it's active

Future sign-in attempts from accounts outside the configured OU will be rejected.
If you reorganize your directory and move a staff member out of the OU, that user will lose CMS access at their next sign-in until they're moved back or the OU configuration is updated.
If you need to change or expand the OU later (for example, adding a second OU or switching to a different parent), submit another ticket through Eddy with the same information — a support agent will update the configuration.

Other ways to reach Edlio

For non-technical or non-CMS requests, see the Get Help page:

Login trouble — fill out the login help form instead of submitting through Eddy.
Service disruptions — check the Status Page.
Billing or account questions — email [email protected].
Sales / adding features — USA: 877-646-0500.