COmanage Users List

[Paul Caskey <>]

Thanks!  I think the enrollment form would probably get too busy.

I think I'll stick with telling users to go to "My Groups" for now... 


> -----Original Message-----
> From: Benn Oshrin 
> [mailto:]
> Sent: Monday, April 17, 2017 8:08 PM
> To: Paul Caskey 
> <>
> Cc: 
> 
> Subject: Re: [comanage-users] RE: self-service groups
> 
> If you set a default value and flag the attribute as not modifiable, it 
> will make
> the enrollee a member of that group. You can have multiple group attributes
> to enroll into multiple groups at the same time.
> 
> If you don't set it not modifiable, then the enrollee can pick from the
> available groups.
> 
> Currently, there's no "select from some groups, but not all" capability, 
> except
> by setting up multiple attributes that have a default value, are not
> modifiable, but are optional (in which case the enrollee can select from the
> groups you've offered). More details under "Default Values For Attributes"
> here:
> 
> 
> https://spaces.internet2.edu/display/COmanage/Registry+Enrollment+Flow
> +Configuration
> 
> It's a bit confusing in email, but if you play with the configs you'll see 
> what I
> mean.
> 
> Thanks,
> 
> -Benn-
> 
> On 4/17/17 6:50 PM, Paul Caskey wrote:
> > Thanks!
> >
> > I would love a tick-box during enrollment.
> >
> > If I add the enrollment attribute (CO group membership), it's rendered
> > as a single-select drop-down.
> >
> > To be able to multi-select, I have to use "My Groups" or the other
> > method I outlined earlier.  Am I missing something on getting a
> > multi-group tick-box?
> >
> > Being able to restrict the displayed groups would also be nice, but I'm
> > being nit-picky now...   :)
> >
> >
> >
> >> -----Original Message-----
> >> From: Benn Oshrin 
> >> [mailto:]
> >> Sent: Monday, April 17, 2017 5:47 PM
> >> To: Paul Caskey 
> >> <>
> >> Cc: 
> >> 
> >> Subject: Re: [comanage-users] RE: self-service groups
> >>
> >> With that config, there should have been a tick box during the
> >> enrollment to opt in to the group. Otherwise, set the attribute to
> >> "Required" to force the group membership.
> >>
> >> But yeah, opt-in via login to Registry is probably simpler after
> >> initial enrollment.
> >>
> >> Thanks,
> >>
> >> -Benn-
> >>
> >> On 4/17/17 12:46 PM, Paul Caskey wrote:
> >> > Never mind this question…
> >> >
> >> >
> >> >
> >> > I think if all those groups will be open, then they can just login
> >> > and self-check the member checkbox.
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> > *From:* 
> >> > 
> >> > [mailto:]
> >> >  *On Behalf Of *Paul
> >> > Caskey
> >> > *Sent:* Monday, April 17, 2017 11:30 AM
> >> > *To:* 
> >> > 
> >> > *Subject:* [comanage-users] self-service groups
> >> >
> >> >
> >> >
> >> > Second question…
> >> >
> >> >
> >> >
> >> > If I want to enable CO Persons to self-enroll in open groups,
> >> > what’s the best way?
> >> >
> >> >
> >> >
> >> > I tried self-enrollment, which was finalized, appeared to be
> >> > successful, but didn’t add the user to groups either in COmanage or
> LDAP.
> >> >
> >> >
> >> >
> >> > From the enrollment flow:
> >> >
> >> > Enroll AuthZ: CO Person
> >> >
> >> > Identity Matching: Self
> >> >
> >> > Email Conf: None
> >> >
> >> >
> >> >
> >> > With only 2 “groups” as enrollment attributes:
> >> >
> >> > 1.       “Test Group”
> >> >
> >> > a.       Attribute: Group Member (CO Person)
> >> >
> >> > b.       Optional
> >> >
> >> > c.       Default Value: Test Group
> >> >
> >> > d.       Modifiable: No
> >> >
> >> >
> >> >
> >> >
> >> >
> >> > I see the petition and it says ‘finalized’, but the user wasn’t
> >> > added to the groups.  And no admins seem to have been notified of a
> >> > need for further approval.
> >> >
> >> >
> >> >
> >> > Pointers appreciated!
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >