From 69a5592091f2b7c2b3a79e893d2fc6014438ea87 Mon Sep 17 00:00:00 2001 From: Bruno Mercier Costa <94469565+emrcbrn@users.noreply.github.com> Date: Wed, 21 Oct 2026 10:46:34 +0200 Subject: [PATCH] docs: explain how MSPs accept an invite for their own subaddressed email (#1056) The invitation email for engineer+client@ lands in the engineer's own inbox, where the browser is still signed in to the MSP account, so the link signs them back in to that account. Add a warning to open the link in a private window, continue with the email (social login resolves to the main address), and use Forgot password if a sign-up attempt already failed with "Invalid sign up". --- src/pages/manage/for-partners/msp-portal.mdx | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/src/pages/manage/for-partners/msp-portal.mdx b/src/pages/manage/for-partners/msp-portal.mdx index 0f3d2039..aa73cd52 100644 --- a/src/pages/manage/for-partners/msp-portal.mdx +++ b/src/pages/manage/for-partners/msp-portal.mdx @@ -171,6 +171,16 @@ Use email subaddressing to create a user inside the tenant for your MSP engineer 3. Click **Invite User** on the right. 4. Enter the subaddressed email (e.g. `engineer+clientname@yourcompany.com`). + +The invitation email arrives in your own inbox, where your browser is likely still signed in to your MSP account. Opening the invitation link there signs you back in to the MSP account instead of accepting the invite. To accept it as the new user: + +1. Copy the link from the invitation email's button and open it in a private browser window. +2. Enter the subaddressed email and click **Continue**. Don't use Google, Microsoft, or another social login, because those sign you in with your main address. +3. Set a password from the email you receive. + +If you already tried to sign up with the subaddressed email and got **Invalid sign up**, the account exists already. Use **Forgot password** on the login page with the same address to set your password. + + This is the recommended approach as it gives the MSP engineer a proper identity inside the tenant. Use NetBird's [profile switching](/client/profiles) feature to easily switch between your MSP account and client tenant connections on the same device. **Option 2: Add a Network and Routing Peer**