Domain authorization
A license may be restricted to specific domains. Two mechanisms apply:
- Lock-on-first-use - the first domain that validates is remembered and counts a seat.
- Domain allowlist - an explicit list of allowed domains set on the key. If a license
has an allowlist, only those domains validate; anything else is rejected with *"domain not authorized"*. Wildcards like *.example.com match subdomains.
Allowlists are useful for internal/enterprise keys that must only run on approved hosts. Ask your administrator to set or change the allowed domains on your key.
Seats & sites
Each license has a seat limit. Every distinct domain that activates uses one seat. When the limit is reached, new domains are refused with *"site limit reached"*.
- Unlimited licenses (internal/enterprise) have no seat limit.
- Removing or deactivating a site frees its seat.
- Company allotments are pools of seats; each child key issued from the pool uses
one seat from the pool (see Allotments & self-service).
To raise your seat count, upgrade your plan or buy additional seats.