Until now, sharing a roadmap meant choosing between two options that both fell short in an enterprise security review: a public link with an optional password, or giving the stakeholder a full workspace seat. Passwords cannot be audited, cannot be revoked for one person without invalidating them for everyone, and offer no guarantee about who is on the other end. Workspace seats put stakeholders inside work-in-progress and internal planning they have no reason to see.

Craft.io now offers a third link type: Account members only. Opening the link asks the viewer to sign in. If they are a member of your account, they see the view. If they are not, they see nothing. Revoking access for one person is removing them from the account - the link keeps working for everyone else without any password to reissue or redistribute.

To share a view with account members, open the share dialog on any view and select Account members as the link type.

Giving a stakeholder access to a shared view meant giving them a workspace seat. That pulled them into a workspace they were not meant to use - with uncommitted planning, internal naming, and work in progress they had no context for.

Account stakeholders are a new account member type: they hold no workspace seat, can only open views shared with account members, and do not count as paid seats. A leadership group invited as stakeholders gets exactly the roadmap view you send them - and nothing else inside Craft.io. When a contractor finishes an engagement, removing them from the account revokes their access to every account-protected view at once.

In the Users screen, stakeholders appear alongside regular users under the Stakeholder type in the new Type column. The column is sortable, so grouping them takes one click.

To add an Account stakeholder, go to the Account Manager, click Add user, and add them without assigning a space.

For organizations that require SSO, a shared link was always a gap. Public and password-protected links bypass SSO entirely - whoever has the URL or the password gets in, regardless of whether they have authenticated through your identity provider.

Account-protected shared views close that gap. For accounts configured with SSO, opening an account-protected link redirects the viewer to your identity provider automatically. Only someone who authenticates successfully - and is a member of the account - sees the view. No separate configuration is needed: the link inherits whatever login policy the account already enforces.

Inviting stakeholders by hand worked for a known list. It broke down for organizations where hundreds of people should have access - every person still had to be added individually and accept an invitation email, even when the company's identity provider already said they belonged.

With just-in-time provisioning on, anyone who signs in through your identity provider gets a Craft.io account created automatically as a Stakeholder. No invitation, no acceptance step. They can open account-protected shared views immediately and hold no space and no paid seat. If their access needs to grow, an admin adds them to a space like any other Stakeholder.

Just-in-time provisioning is off by default - turning it on is a deliberate act, because it means anyone your identity provider admits into the Craft.io app becomes an account member. With JIT on, revoking access is managed in the identity provider, not in Craft.io.

To enable it, go to Account Settings and turn on Just-in-time provisioning.

The new sharing type comes with a parallel control for admins: the ability to decide which link types are available to everyone in the account.

Account admins can now set which link types are allowed: public, password-protected, and account members. All three can be turned on or off independently. Turning all three off disables shared views for the account entirely. This matters beyond the new type - an organization that wants to ensure no roadmap is ever shared via a public link can enforce that now, regardless of whether anyone uses account-protected sharing.

Disabling a type deactivates all existing links of that type. Admins see how many links are affected before confirming, so nothing goes dark unexpectedly.

To configure account-wide sharing controls, go to Account Settings and open the Sharing section.