From a0bb89a3729cba408184a63e279ba8f9a1d052a5 Mon Sep 17 00:00:00 2001
From: Krrish Dholakia <krrishdholakia@gmail.com>
Date: Tue, 6 Aug 2024 22:54:33 -0700
Subject: [PATCH] docs(ui.md): add restrict email subdomains w/ sso

---
 docs/my-website/docs/proxy/ui.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/docs/my-website/docs/proxy/ui.md b/docs/my-website/docs/proxy/ui.md
index a3eaac3c000..a9492a3a5e1 100644
--- a/docs/my-website/docs/proxy/ui.md
+++ b/docs/my-website/docs/proxy/ui.md
@@ -186,6 +186,16 @@ PROXY_BASE_URL=https://litellm-api.up.railway.app/
 #### Step 4. Test flow
 <Image img={require('../../img/litellm_ui_3.gif')} />
 
+### Restrict Email Subdomains w/ SSO
+
+If you're using SSO and want to only allow users with a specific subdomain - e.g. (@berri.ai email accounts) to access the UI, do this:
+
+```bash
+export ALLOWED_EMAIL_DOMAINS="berri.ai"
+```
+
+This will check if the user email we receive from SSO contains this domain, before allowing access.
+
 ### Set Admin view w/ SSO 
 
 You just need to set Proxy Admin ID