I set up energy.phacility.com and am the admin, with username mbaker / email mbaker@genability.com.
One of my colleagues set up an account as spharris, email sharris@genability.com
I have auth.email-domains at energy.phacility.com set to allow from genability.com
But when he goes to the instance, it gives him the following error:
OAuth: Not Authorized
You are not authorized to authenticate.
OAuth Error Code: invalid_client
He tried opening a private window and logging directly into energy.phacility.com (instead of possibly going through admin.phacility.com). No dice.