Re: [Unity-idm-discuss] enquiry form not applicable

[Krzysztof B. <kb...@un...>]

Dear Sander,

W dniu 21.12.2022 o 11:06, Sander Apweiler pisze:
> Dear Krzysztof,
>
> On Wed, 2022-12-21 at 10:54 +0100, Krzysztof Benedyczak wrote:
>> Dear Sander,
>>
>> W dniu 20.12.2022 o 15:22, Sander Apweiler pisze:
>>> Dear Krzysztof,
>>> we have ticket from a user about a problem to join a group. He got
>>> an
>>> invitation, but when he tries to follow the link and selecting,
>>> that he
>>> has already an account an error is shown that the enquiry is not
>>> applicable.
>>>
>>> The log just shows:
>>> 2022-12-20T15:02:39,400 [qtp573262513-45704] DEBUG
>>> unity.server.web.EnquiryWellKnownURLViewProvider: Enquiry form
>>> DataHub-
>>> GFZ_TestmanagementJoinEnquiry is not applicable
>>>
>>> I saw that the user was in past in the group. We checked if the
>>> user is
>>> already in the group, but he is not. There is not open enquiry of
>>> this
>>> user. Do you have some further hints for us, why the user can't
>>> follow
>>> this enquiry?
>> Yes, however there is bunch of points to be verified.
>>
>> 1. Please note down the enquiry form in question condition (if not
>> empty) and other general settings (is it sticky? is it by invitation
>> only?) - basically everything that is on the first screen of the
>> enquiry
>> configuration in console.
> It's sticky and by invitation only. Targeted group is / and only if the
> upman manged group is not in groups attribute. Automation has auto
> accept if "validCode == true" and the addToGroup statement.
>
>> 2. For that user in console in the root group please check what is a
>> value (if any) of the FilledEnquiries attribute. Note that this is
>> system attribute, by default hidden, in attributes viewer you have to
>> enable showing such in the menu. (<- I think this is the most likely
>> to
>> be the reason)
> The user only has the sys:policy-agreement-state attribute but not the
> FilledEnquiries attribute.


It took a while, but I was finally able to reproduce and understand what 
happens.

So in this case the user U is invited with some email E1, but has 
account in Unity with email E2. In such case, Unity will show the 
registration form after following the registration link, but the user 
has an option to switch to an enquiry if wants (i.e. can decide that 
instead of creating a new account will bind another, the existing one 
with E2). And this fails as after switching to enquiry, Unity stops to 
treat the user as invited (as invitation was sent to E2).

I'll open a ticket to fix that.

For the workaround: invitation with the registered email (i.e. E1) 
should work perfectly. It will also work if the join enquiry is not set 
as "by invitation only". But AFAIR it was don one some (other) purpose, 
right?

Best regards,
Krzysztof