Inviting Team Members
CTFFactory workspaces support multi-user collaboration. Owners and Admins can invite colleagues by email address from the People page, assigning them a role at the time of invitation.
Who Can Invite Members
Only users with the Owner or Admin role can send invitations. Members and Viewers cannot invite other users. See Roles and Permissions for a full capabilities breakdown.
Sending an Invitation
- Navigate to Workspace Settings > People (or use the shortcut link at
/peoplein your workspace). - Click Invite Member in the top-right corner.
- Enter the invitee's email address. Multiple addresses can be entered as a comma-separated list to send bulk invitations.
- Select the role to assign: Admin, Member, or Viewer.
- Optionally add a personal message that will appear in the invitation email.
- Click Send Invitation.
The invitee receives an email from [email protected] containing a unique, single-use invitation link. The link is valid for 7 days. If it expires, an Admin or Owner can resend the invitation from the Pending Invitations list.
Note: You cannot invite someone as an Owner. Ownership can only be transferred from an existing Owner via Workspace Settings > General > Transfer Ownership.
What the Invitee Sees
When a recipient clicks the invitation link:
- If they already have a CTFFactory account, they are prompted to sign in and then confirm joining the workspace.
- If they do not have an account, they are guided through account creation (name, password, and MFA setup if MFA is enforced by your workspace policy) before being added to the workspace.
Once accepted, the invitee appears in the Active Members list on the People page with the role assigned at the time of invitation.
Managing Pending Invitations
The Pending Invitations section of the People page lists all invitations that have been sent but not yet accepted. From this view, Owners and Admins can:
| Action | Description |
|---|---|
| Resend | Sends a new invitation email with a fresh 7-day link |
| Revoke | Cancels the invitation; the original link becomes invalid immediately |
| Change role | Updates the role that will be assigned upon acceptance |
Removing a Member
To remove a member from the workspace:
- Navigate to Workspace Settings > People.
- Find the member using the search box or scroll.
- Click the ... menu next to their name.
- Select Remove from workspace and confirm.
Removing a member immediately revokes their access to all workspace resources. Their previously generated challenges, CTF events, and learning path progress records are retained in the workspace — no data is deleted. If the removed user holds active API keys scoped to this workspace, those keys are also revoked.
Caution: Removing an Admin who created critical resources (webhooks, custom domains, CTF events) does not delete those resources, but the workspace Owner should verify that another Admin or the Owner themselves is aware of any ongoing configurations the removed user managed.
SSO and Automatic Provisioning
If your workspace uses SSO / OIDC, members who authenticate through your corporate identity provider are provisioned automatically on first login without requiring a manual invitation, provided their identity provider group or attribute matches a configured provisioning rule. Manually invited users and SSO-provisioned users are managed from the same People page.
Member Limits
The number of active members permitted in a workspace depends on your subscription plan. When the member limit is reached, new invitations can still be sent but recipients will be queued until a seat becomes available or the plan is upgraded. Current seat usage is displayed in Workspace Settings > Billing.