Organizations

HarnessTap Cloud scopes published layers, billing, and access control to organizations. Each org is an isolated tenant boundary with its own members, catalogs, and plan tier.

Multiple organizations

A single user can belong to several organizations. Your active organization determines which published layers you see in the web UI and which org context the CLI uses for cloud commands.

Switching in the web UI

Use the organization switcher in the authenticated app to change your active org. The selection persists in a session cookie for subsequent page loads.

Switching in the CLI

List available organizations and switch the active org for your CLI profile:

harnesstap auth orgs --switch org-slug

Confirm the active context with harnesstap auth status.

Invitations

Organization admins and owners can invite users by email. Invitees receive a pending invitation they can accept or reject. Accepted members join with the role assigned at invite time (typically member).

Manage invitations from your organization's settings page at /organizations/[slug].

Domain auto-join

Organizations can bind verified email domains so new sign-ups with matching addresses are automatically added. This is useful for team rollouts without manual invites for every engineer.

Domain routing is configurable per organization. Multiple domains can map to the same org.

Enterprise SSO and SCIM

Enterprise customers can configure SSO/SCIM for centralized identity and automated provisioning. This requires a guided rollout — see pricing or use the "Talk to sales" chat on marketing pages for enterprise setup.