Skip to main content

​
Organization settings

An organization is your NeuralTrust tenant: one place for members, roles, SSO, product access, and the products you run (TrustGate, TrustGuard, TrustTest, Telemetry). Organization settings (sidebar label General) is the Workspace panel for the tenant’s identity and lifecycle — who the org is, how you identify it to support, how members leave, and how the Owner retires the tenant. Membership, invitations, and the permission model live in Users & groups. Sign-in and directory lifecycle live under SSO Configuration.

​
Open Organization settings

  1. Sign in to NeuralTrust.
  2. Click the gear in the left sidebar.
  3. Open Platform settings.
  4. Under Workspace, select General.
Anyone who can open Platform Settings can view this panel. Who can change each field is listed below.

​
What counts as “org settings”

In the console, customer-facing organization administration spans a few surfaces. Use this map so you open the right panel:
SSO Configuration and SCIM are Enterprise plan features. The Free plan hides both screens in Platform Settings. Plans & Billing lists them under Enterprise.
Models and Email may appear under Integrations for some tenants; they are org-scoped integrations, not part of Workspace → General. Internal NeuralTrust-only admin queues (orgs waitlist, cross-org SSO domains, BTG admin) are not customer org settings.

​
Organization name

The organization name is the human-readable label for the tenant.

​
Where it appears

  • Organization switcher and shell chrome
  • Invitation and some notification emails
  • Billing and support context
  • Confirmation prompts (for example delete organization)

​
Rename

  1. Open Platform settings → General.
  2. Edit Organization name.
  3. Save from the settings footer when the form shows unsaved changes.
Renames are visible to all members on the next load. No downtime and no need to reconfigure IdP apps solely because the display name changed. The organization name is not your Custom Domain. The name is a label; the custom domain is the hostname users type to reach the app.

​
Organization ID

Organization ID is a UUID assigned when the organization is created. It never changes for the life of the tenant. When support or an integration asks for “team id” or “tenant id”, this is the value to send.

​
Plan

Plan shows the organization’s current plan. A Free organization shows Free. The field helper reads: “Your organization’s current plan. See Plans & Billing…”.

​
Leave organization

Only non-owners can leave an organization.
Members who are not the Owner can leave the organization from General.

​
Steps

  1. Open Platform settings → General.
  2. Choose Leave organization.
  3. Confirm in the dialog.

​
Effects

  • Your membership ends immediately.
  • Console sessions, product access, and invitations tied to this org end for you. Agent Gateway MCP sign-ins are revoked shortly after, and an MCP access token already issued can keep working until it expires (up to one hour).
  • On a hybrid, self-hosted, or other customer-run data plane, that revocation is applied only after the plane runs a TrustGate build that reads session revocations from the config sync (post-#1142). An older plane ignores the new snapshot field and keeps serving, so the member’s existing MCP sign-ins on that plane keep working until it is upgraded. See Session revocations.
  • Audit history already written keeps your email as the actor where applicable.
  • You do not delete the organization or other members’ data.

​
Rejoining

You can return only if:

​
Owners

Owners cannot leave. To exit:
  1. Transfer ownership to another eligible member, then leave, or
  2. Delete the organization if the tenant should be retired entirely.

​
Delete organization

Deleting the organization is permanent. Only the Owner can do it.

​
What is removed

​
Steps

  1. Open Platform settings → General.
  2. Under the danger zone, choose Delete organization.
  3. Type the organization name exactly to confirm.
There is no restore and no soft-delete window. Recreating means a new organization ID and a full rebuild of SSO, users, integrations, and products.

​
Before you delete (production checklist)

  • Confirm retention of audit events you still need — export from Telemetry → Logs or rely on SIEM retention
  • Rotate or revoke long-lived API keys and gateway/collector credentials
  • Remove client integrations (MDM profiles, PAC URLs, agents)
  • On hybrid, plan data-plane teardown in your cloud account after the org is deleted
  • Notify stakeholders; transfer any shared runbooks that referenced this org ID

​
Prefer not to delete?

​
Permissions summary

  • Users & groups — full guide to members, groups, invites, roles, product permissions, ownership, and Break the Glass
  • SSO Configuration — Entra, Google Workspace, Okta, OIDC, email domains, Enforce SSO
  • Custom Domain — frontend hostname on SaaS or Hybrid
  • Audit Logs — team.* and membership events in Telemetry → Logs
  • Platform overview — map of all Platform Settings groups