Skip to main content

Illumio Administration Guide 26.x (SaaS)

PCE Organization and Users

A PCE organization is a group of policies and users targeted to a specific business group or unit, including all networking and security rules and the people associated with those policies. An organization can contain any number of users, workloads, policy objects (policies, IP lists, services, and security settings), and labels.

Your Illumio administrator initially sets up organizations. When an organization is created, an email containing a user login is sent. The organization is created when this user logs in, and users can now be invited to join.

Invite Users to Your Organization

As an organization owner, you can invite other users to your organization and assign them roles to specify their permissions.

When you invite a user to your organization, they receive an email at the specified address with a link to set up their account. The link in the invitation email is valid only for 7 days, after which it expires. If you invited a user who did not receive their email or did not sign up using that email, you can re-invite them.

External Users and Non-Email Usernames

When you use an external corporate Identity Provider (IdP) to authenticate users with the PCE, but your IdP usernames do not use email addresses, the PCE cannot send email invitations to those users when you add them to the PCE. When you add this type of user, send them a login URL that they can use to set up their Illumio Segmentation for Data Centers accounts and log in to the PCE web console.

Invitation Emails Are Not Sent

When users you invite do not receive their invitation emails, the SMTP server might not be configured correctly with the PCE.

  • Make sure that your PCE’s IP address is allowed to relay messages and that any anti-spam protection does not block its emails.

  • Check your PCE's runtime_env.yml file to make sure that the smtp_relay_address value is correct.