> ## Documentation Index
> Fetch the complete documentation index at: https://docs.planeconnection.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Configure Your Workspace

> Set up workspace branding, notifications, email, menu customization, two-factor authentication, and module settings.

This guide helps you configure your workspace's organization profile, notifications, email, navigation, and security settings across the Safety and Ops modules.

<Warning>
  This feature requires **administrator** or **workspace owner** permissions. Changes made here
  affect all users in your workspace.
</Warning>

<Info>
  **Who should read this:** Workspace administrators (Admin role). Most settings require the Admin
  role. Safety-specific settings (policy, trust, classification) also accept the Safety Manager
  role. You need an active
  PlaneConnection workspace.
</Info>

## Configure the organization profile (Safety module)

The organization profile stores your company details and FAA certificate
information. This data appears in compliance reports and the Declaration
of Compliance.

<Steps>
  ### Step 1: Navigate to Settings

  In the **Safety** module sidebar, click **Settings**. The default page is
  **Organization Profile**.

  ### Step 2: Enter basic information

  Fill in the **Organization Name** and **Website** fields.

  ### Step 3: Set your FAA certificate details

  Under **FAA Certificate**, select your certificate type from the
  dropdown and enter your **Certificate Number**.

  ### Step 4: Enter address and contact information

  Complete the **Address** and **Contact Information** sections.

  ### Step 5: Save your changes

  Click **Save Changes** at the top of the page.
</Steps>

<Tip>
  The organization profile also includes a **Mobile Reporting QR Code** section. Download or print
  this QR code and post it in common areas so team members can quickly submit safety reports from
  their phones. This supports 14 CFR 5.21(a)(4) non-punitive reporting requirements.
</Tip>

## Configure the flight department (Ops module)

The Ops module has its own company details form that controls branding
on tripsheets, reports, and operational documents.

<Steps>
  ### Step 1: Open Ops settings

  Switch to the **Ops** module using the module switcher in the sidebar.
  Click **Settings**, then select the **General** category and choose
  **Flight Department**.

  ### Step 2: Upload your logo

  Click the logo upload area and select a PNG or JPEG file.

  ### Step 3: Fill in company details

  Enter your company name, email, phone, certificate number, address,
  timezone, and preferred date format.

  ### Step 4: Save settings

  Click **Save Settings** at the bottom of the page.
</Steps>

<Warning>
  Changing your timezone affects created/modified dates, flight history timestamps, calendar
  display, and schedule times. Confirm this is intentional before saving.
</Warning>

## Set up notifications

Notification preferences control how your team receives alerts for
flights, maintenance, billing, crew changes, and system events.

<Steps>
  ### Step 1: Navigate to notification settings

  In the **Ops** module, go to **Settings > General > Notification**.

  ### Step 2: Configure channels per event type

  The notification matrix shows event types grouped by category.
  For each event, toggle the delivery channels: **Email**, **Push**, or **SMS**.

  ### Step 3: Save preferences

  Click **Save Notification Preferences** at the bottom of the page.
</Steps>

<Tip>
  Enable SMS for critical events like trip cancellations, payment overdue alerts, and security
  alerts. Keep less urgent notifications on email only to avoid alert fatigue.
</Tip>

## Configure email settings

Email settings control the SMTP server used for outgoing notifications
and the templates for automated emails.

<Steps>
  ### Step 1: Navigate to email settings

  In the **Ops** module, go to **Settings > General > Email**.

  ### Step 2: Enter SMTP configuration

  Fill in your SMTP host, port, username, and password. Set the "From
  Name" and "From Email" that recipients will see.

  ### Step 3: Customize templates (optional)

  If you want to customize email templates, click the **Edit** icon on
  any template to modify its subject line.

  ### Step 4: Test your configuration

  Click **Send Test Email** to verify the SMTP connection works.

  ### Step 5: Save email settings

  Click **Save Email Settings** at the bottom of the page.
</Steps>

## Customize the navigation menu

You can show, hide, and reorder sidebar navigation items to match your
team's workflow.

<Steps>
  ### Step 1: Navigate to menu settings

  In the **Ops** module, go to **Settings > General > Menu Item**.

  ### Step 2: Toggle visibility

  Use the **Visible** switch on each row to show or hide menu items.

  ### Step 3: Reorder items

  Change the **Order** number for each item. Lower numbers appear first
  in the sidebar.

  ### Step 4: Save your configuration

  Click **Save Menu Configuration**.
</Steps>

## Configure Single Sign-On (SSO)

Single Sign-On lets your team authenticate to PlaneConnection using your existing
identity provider (IdP) — Okta, Azure Active Directory, Google Workspace, or any
OIDC- or SAML-compliant provider.

<Info>
  SSO configuration requires the **workspace\_settings** permission. It is typically performed by an
  IT administrator who has access to both PlaneConnection and the organization's identity
  provider.
</Info>

<Steps>
  ### Step 1: Open the SSO settings page

  Navigate to **Settings > Security > Single Sign-On**.

  ### Step 2: Add an identity provider

  Click **Add Identity Provider**. Choose the protocol your IdP uses:

  | Protocol | Supported providers                                                 |
  | -------- | ------------------------------------------------------------------- |
  | **OIDC** | Okta, Google Workspace, Azure AD, Auth0, and any OIDC-compliant IdP |
  | **SAML** | Enterprise SAML 2.0 providers                                       |

  ### Step 3: Enter IdP details

  For OIDC providers, provide:

  | Field         | Where to find it                                           |
  | ------------- | ---------------------------------------------------------- |
  | Provider ID   | A short slug you choose (e.g., `okta`, `google`)           |
  | Issuer URL    | From your IdP's OIDC discovery document                    |
  | Domain        | Your organization's email domain (e.g., `yourcompany.com`) |
  | Client ID     | From the application registration in your IdP              |
  | Client Secret | From the application registration in your IdP              |

  ### Step 4: Verify domain ownership

  PlaneConnection requires you to prove you own the email domain before activating
  SSO. A DNS TXT record is shown on the settings page. Add it to your domain's DNS:

  ```
  TXT _planeconnection-verify.yourcompany.com <verification-token>
  ```

  DNS propagation may take up to 24 hours. Click **Verify** when the record is live.

  ### Step 5: Copy the Service Provider metadata

  After adding the provider, PlaneConnection displays the **SP (Service Provider)
  metadata** — redirect URI and entity ID — that you must configure in your IdP's
  application settings. Copy these values into your IdP.

  ### Step 6: Activate SSO

  Once the domain is verified and your IdP is configured with the SP metadata, toggle
  the provider to **Active**. Workspace members whose email domains match will see the
  SSO option at login.
</Steps>

<Tip>
  Test SSO in an incognito window while keeping your admin session open in a regular window. If the
  configuration is incorrect, you can fix it without being locked out.
</Tip>

<Warning>
  Enabling SSO does not automatically disable password-based login. To enforce SSO for all users,
  contact support after verifying your IdP is working correctly.
</Warning>

## Enable two-factor authentication

Two-factor authentication (2FA) adds a second verification step at
login, improving account security.

<Steps>
  ### Step 1: Navigate to 2FA settings

  In the **Ops** module, go to **Settings > General > Two-Factor
  Authentication**.

  ### Step 2: Enable 2FA

  Toggle the switch to enable two-factor authentication.

  ### Step 3: Choose your method

  Select **Authenticator App (TOTP)** or **SMS Text Message**.

  ### Step 4: Set up your authenticator (TOTP method)

  If you chose TOTP, scan the displayed QR code with your
  authenticator app.

  ### Step 5: Save recovery codes

  Copy and securely store the eight recovery codes. Each code can only
  be used once.
</Steps>

<Warning>
  If you disable 2FA, your account reverts to password-only authentication. Consider the security
  implications before disabling.
</Warning>

## Related

<CardGroup cols={2}>
  <Card title="Manage Users" href="/how-to/admin/manage-users">
    Invite users, assign roles, and manage permissions.
  </Card>

  <Card title="Set Up Integrations" href="/how-to/admin/set-up-integrations">
    Connect third-party services to your workspace.
  </Card>

  <Card title="Configure Flight Settings" href="/how-to/admin/configure-flight-settings">
    Flight logs, duty time, airports, and tripsheets.
  </Card>

  <Card title="Manage Billing" href="/how-to/admin/manage-billing">
    Subscription tiers, payment methods, and plan changes.
  </Card>
</CardGroup>
