COmanage Users List

[Mike Manske <>]

We use self-signup, and require login so we can capture the eppn. We
direct a user to a landing page with instructions that requires login.
That page directs them, via link, to the self-signup enrolment form.

MikeM


On Tue, Jun 20, 2017 at 8:53 AM, Benn Oshrin 
<>
 wrote:
> Right, IIRC there's no way to mark an identifier pulled from $ENV as a
> login identifier atm. That code is scheduled to be refactored in the not
> too distant future...
>
> On 6/20/17 9:49 AM, Mihály Héder wrote:
>> Hi,
>>
>> ah, no. I assume that the email-by-invite enrollment method is also an
>> implicit email verification and that is why it works there and not my
>> self-signup flow?
>> I will enable the email verification then. Although in most of the cases
>> I have a pretty solid, idp-asserted email address from the federated
>> authentication in the apache environment, so it is a bit unfortunate
>> that the collection of the eppn is tied to email verification.
>>
>> Mihály
>>
>> On Tue, Jun 20, 2017 at 1:21 PM, Benn Oshrin 
>> <
>> <mailto:>>
>>  wrote:
>>
>>     Hi Mihály,
>>
>>     Are you using email confirmation with self signup?
>>
>>     
>> https://spaces.internet2.edu/display/COmanage/Registry+Enrollment+Flow+Configuration#RegistryEnrollmentFlowConfiguration-EmailVerification(Confirmation)andAuthentication
>>     
>> <https://spaces.internet2.edu/display/COmanage/Registry+Enrollment+Flow+Configuration#RegistryEnrollmentFlowConfiguration-EmailVerification(Confirmation)andAuthentication>
>>
>>     Thanks,
>>
>>     -Benn-
>>
>>     On 6/20/17 6:34 AM, Mihály Héder wrote:
>>     > Hi List,
>>     >
>>     > I encountered a problem about self-signup enrollment flows. In case 
>> of
>>     > invitations, I can configure the enrollment flow so that it will 
>> require
>>     > login and the organizational entity that gets created will have the
>>     > proper eppn session associated to it, taken from the shibboleth
>>     session..
>>     >
>>     > However, I could not achieve the same functionality in case of
>>     > self-signup. I can get all kinds of attributes name, title, email,
>>     etc)
>>     > from the session or I can even get the eppn in some other field
>>     into if
>>     > I set up the environment variable name so. But I cannot get it as 
>> eppn
>>     > unfortunately.
>>     >
>>     > Why is this? Is it possible that there is no such feature with
>>     > self-signup or is it just a configuration issue?
>>     >
>>     > Thank you
>>     >
>>     > Mihály
>>     >
>>
>>
>>
>>
>> --
>> Mihály Héder, PhD
>> Research Fellow
>> Institute for Computer Science and Control
>> Hungarian Academy of Sciences