You can restrict the creation of new users in Odoo.

With this setting, only users with your invitation can create an account in Odoo.

1. Override the Signup Controller

Modify Odoo’s auth_signup controller to check the email domain before allowing registration.

📌 Steps:

1. Create a new module or update your existing custom module.
2. Extend the AuthSignupHome controller to restrict email domains.

📌 Example Code (Python - Controller Override):

python
CopyEdit
from odoo import http
from odoo.http import request
from odoo.addons.auth_signup.controllers.main import AuthSignupHome

ALLOWED_DOMAIN = "mycompany.com"

class CustomAuthSignup(AuthSignupHome):

    def do_signup(self, qcontext):
        email = qcontext.get('email', '').strip().lower()
        if not email.endswith(f"@{ALLOWED_DOMAIN}"):
            raise ValueError("Signup is restricted to MyCompany employees only.")
        return super(CustomAuthSignup, self).do_signup(qcontext)

2. Modify Signup Form to Show Error Message

You can customize the signup page template to display a warning message if users enter an invalid email.

📌 Steps:

1. Edit the views/auth_signup_login.xml file in your custom module.
2. Add a validation script to check the email before submission.

📌 Example (JavaScript - Client-Side Validation):

javascript
CopyEdit
document.addEventListener("DOMContentLoaded", function () {
    document.querySelector("#signup_form").addEventListener("submit", function (event) {
        var email = document.querySelector("input[name='email']").value;
        if (!email.endsWith("@mycompany.com")) {
            alert("Signup is restricted to MyCompany employees only.");
            event.preventDefault();
        }
    });
});

3. Hide Signup Option for Non-Company Emails

If you want to completely disable signup for external users, you can restrict the “Sign Up” button in the website settings:

📌 Steps:

1. Go to Website > Configuration > Settings.
2. Under Customer Accounts, select “Customers Only”.
3. Enable Login Required to prevent public users from accessing the signup page.