diff --git a/content/docs/administration/sign-in-restriction.md b/content/docs/administration/sign-in-restriction.md
index da05200e..b63c3aec 100644
--- a/content/docs/administration/sign-in-restriction.md
+++ b/content/docs/administration/sign-in-restriction.md
@@ -2,7 +2,11 @@
title: Sign-in Restriction
---
-This document explains some sign-in restrictions.
+
+
+Only **Workspace Admin** can update the settings.
+
+
## Sign-in Frequency
@@ -10,40 +14,28 @@ This document explains some sign-in restrictions.
**Sign-in Frequency** specifies the period that users are required to sign in again.
-Only **Workspace Admin** can update the **Sign-in Frequency** settings.
-
-In Bytebase Workspace, Go to **Settings** -> **General** and scroll down to **Account** section, where you can
-
-- Choose between `Hour(s)` and `Day(s)`.
-- Click `+`,`-` or input a number to set the **Sign-in Frequency**.
+In Bytebase Workspace, Go to **Settings** -> **General** and scroll down to **Account** section.
![sign-in-frequency](/content/docs/administration/sign-in-restriction/sign-in-frequency.webp)
-
-
-You need to restart Bytebase and re-login to make the change take effect.
-
-
+You need to restart Bytebase to make the change take effect.
## Disallow Sign-in with Email & Password
-As `Workspace Admin`, having had [SSO](https://www.bytebase.com/docs/administration/sso/overview) (for example [OAuth 2.0 in GitHub](https://www.bytebase.com/docs/administration/sso/oauth2/#github)) configured, you can [enforce SSO sign-in](https://www.bytebase.com/docs/administration/sso/overview/#enforce-sso-sign-in) for all users in Workspace.
+Once [SSO](/docs/administration/sso/overview) is configured, you can [enforce SSO sign-in](/docs/administration/sso/overview/#enforce-sso-sign-in) for all users.
## Sign-in from Email Domains
-Go to **Settings** -> **General**, scroll down to **Security** section. Fill in `Workspace Domain` tab with the email domain for your Workspace members. Click **Update** to save changes.
+Go to **Settings** -> **General**, scroll down to **Security** section. Fill in `Workspace Domain` tab with the email domain for your Workspace members. Then tick the `Members restriction` box.
![set-domain](/content/docs/administration/sign-in-restriction/set-domain.webp)
-You can restrict members' email addresses by ticking the `Members restriction` box. Afterwards, when you
-- Sign in (Note that the new restriction only works for the accounts registered after the `Workspace Domain` was updated)
- ![sign-in-domain-restriction](/content/docs/administration/sign-in-restriction/sign-in-domain-restriction.webp)
-
-or
+Domain restriction applies to:
-- **Add User** in **IAM & Admin** -> **Users & Groups**
- ![add-user-domain-restriction](/content/docs/administration/sign-in-restriction/add-user-domain-restriction.webp)
+- Sign-in page. (Note that the new restriction only applies to the accounts registered after the `Workspace Domain` was updated)
+ ![sign-in-domain-restriction](/content/docs/administration/sign-in-restriction/sign-in-domain-restriction.webp)
-Users' email must be of the domain you set in both scenarios.
\ No newline at end of file
+- **Add User** in **IAM & Admin** -> **Users & Groups**. Users' email must be of the domain you set in both scenarios.
+ ![add-user-domain-restriction](/content/docs/administration/sign-in-restriction/add-user-domain-restriction.webp)