The standard advice for securing an internal tool with company SSO is: talk to IT, get them to configure Okta or Azure AD, go through the vendor's enterprise onboarding, pay $300–800/month.
That advice is designed for large companies with dedicated IT teams. If you're an individual contributor who built something in Claude Code and wants their 8-person team to use it, here's a much faster path.
What company email gating actually requires
- User arrives at your URL
- They authenticate with their work email (Google Workspace, Microsoft 365)
- Your app verifies the email domain matches @yourcompany.com
- If yes: access granted. If no: access denied.
That's it. No Okta configuration. No IT ticket. No SAML setup. Enterprise SSO only comes into play when a company wants centralized administration — audit logs, automatic deprovisioning, group-based access. That's a V3 problem, not a "share this with my 8 coworkers" problem.
Option 1: Workshop (built for this exact use case)
Workshop is a CLI deploy tool where company-email gating is the product, not an enterprise add-on.
npm install -g @getworkshop/cli
workshop login
cd your-project
workshop deploy
# Choose "company domain" access modeUnder the hood: Workshop intercepts requests before your app loads, signs users in via Google or Microsoft OAuth, checks the email domain, and either passes the request through or shows an access denied screen. Your app doesn't need to know anything about auth.
Cost: $19/month. No minimum contract, no IT involvement.
Option 2: Cloudflare Access (free for small teams)
Cloudflare Zero Trust has a free tier that includes email domain-based access policies. It requires configuring a Cloudflare tunnel and putting your app behind it. Takes about 45 minutes to set up for the first time. More powerful but more config than Workshop.
Option 3: Clerk ($0–25/month)
Clerk is a developer auth product. You add it to your app in 20–30 minutes and it handles the OAuth and email verification. The downside: you have to modify your app code to integrate it. Workshop requires zero app code changes.
The right choice for most vibe-coded apps
If you built something with Claude Code or Cursor and you want your @company.com team to use it today: Workshop is the fastest path. Zero code changes, 30 seconds to deploy, $19/month.
If you need centralized IT administration, deprovisioning, and full audit logs: that's when you talk to IT about real enterprise SSO (Okta, Azure AD, Google Workspace SSO).