Before you start
Make sure your Base44 account manager has confirmed that your enterprise workspace is created and that you have owner or admin access to it.
1. Invite your team
Start by adding your team members to the workspace. You can invite people individually or upload a CSV to invite in bulk. Each person is assigned a role that controls what they can do.| Role | What they can do |
|---|---|
| Admin | Manages members and workspace settings. Does not handle billing. |
| Editor | Builds and edits apps, and uses credits from the workspace pool. |
| Viewer | Has read-only access to specific apps and does not consume credits. |
- Click your workspace name at the top left.
- Click Settings.
- Click Members.
- Click Invite member to add someone individually, or Bulk Invite to upload a CSV.
If you plan to use SCIM provisioning to sync members automatically from your identity provider, you can skip manual invites for those users. See step 5.
2. Connect your workspace domain
Connect your organization’s domain to your workspace for a branded address and domain-based access control. Your domain is also required before you can set up SSO. Learn how to connect your workspace domain.3. Set up Single Sign-On
Enable SSO so your team signs in with their existing company credentials. Once enabled, anyone with your approved email domain is added to the workspace automatically as a Viewer when they first sign in. Learn how to set up SSO for your workspace.4. Configure workspace policies
Control how apps, Superagents, connectors, and external access behave for everyone in the workspace.- Enforce SSO for all apps: Require app users to authenticate through your SSO provider
- Publishing permissions: Control who can publish apps and which visibility levels each role can use
- Connector management: Control which external services are available in your workspace, and whether apps can use shared credentials, app user credentials, or both
- Disable Superagents: Hide Superagents from all workspace members if your organization has not approved AI agents for use
- External collaborators: Control whether any member or only admins can invite people from outside the workspace to collaborate on apps
5. Set up automated provisioning (optional)
If your organization uses Okta or Microsoft Entra ID, set up SCIM to automatically sync workspace membership. When someone joins or leaves your organization in your identity provider, their Base44 access updates instantly with no manual work needed. Learn how to set up automated provisioning with SCIM.6. Set credit limits (optional)
Set a default monthly credit cap that applies to all workspace members, with the option to override limits for specific individuals. This is useful for preventing any one member from consuming a disproportionate share of the workspace credit pool. Learn how to set credit limits for your members.7. Move existing apps (optional)
If you or your team have apps in a personal workspace that you want to bring into the enterprise workspace, you can move them from the app dashboard. Because each app can only be moved by its owner, this is a 2-step process between you and each app owner.Before anyone can move an app:
- The app owner must be an active member of the enterprise workspace
- App transfers must be enabled in the source workspace (Settings → Apps configuration → App Transfers)
- The app cannot be a purchased app
- Click your workspace name at the top left.
- Click Settings → Members → Invite member.
- Enter the app owner’s email address.
- Assign a role. Editor or higher is recommended so the app owner can build and contribute in the workspace.
- Click Send Invite.
- Open the invitation email from Base44 and click Accept Invitation.
- Open the app in its current workspace.
- Go to the app dashboard and click Overview.
- Click Move App next to Move to Workspace.
- Select the enterprise workspace from the list.
- Click Move App to confirm.
After moving, the app uses the enterprise workspace’s credit pool. The published app URL does not change and all app data, media, and configurations remain intact.
8. Explore more enterprise features
Once the basics are in place, explore additional security and access controls.- IP allowlist: Restrict workspace access to approved IP addresses and networks
- Workspace secrets: Create API keys for programmatic access to audit logs and workspace data via the Monitoring API
- Connector management: Manage connector availability across your workspace, review affected apps before disabling access, and control how apps connect to external services
Setup checklist
Setup checklist
Getting help
As an enterprise customer, you have access to dedicated support.- Dedicated account manager: Your account manager is your main point of contact for guidance and ongoing support
- Priority support: Use the Help menu inside Base44 to open a support ticket with guaranteed response times