Re: [Unity-idm-discuss] enquiry form not applicable

[Sander A. <sa....@fz...>]

Dear Krzysztof,
thanks for the feedback. Yes the reason is that the group managers want
to invite only members to the group to have some more control about the
members because group membership includes quotas and permissions on
connected services. Would storing multiple email addresses, if their
are provided by the IdP, of the user also help here?

Best regards,
Sander

On Tue, 2023-01-03 at 14:06 +0100, Krzysztof Benedyczak wrote:
> Dear Sander,
> 
> W dniu 21.12.2022 o 11:06, Sander Apweiler pisze:
> > Dear Krzysztof,
> > 
> > On Wed, 2022-12-21 at 10:54 +0100, Krzysztof Benedyczak wrote:
> > > Dear Sander,
> > > 
> > > W dniu 20.12.2022 o 15:22, Sander Apweiler pisze:
> > > > Dear Krzysztof,
> > > > we have ticket from a user about a problem to join a group. He
> > > > got
> > > > an
> > > > invitation, but when he tries to follow the link and selecting,
> > > > that he
> > > > has already an account an error is shown that the enquiry is
> > > > not
> > > > applicable.
> > > > 
> > > > The log just shows:
> > > > 2022-12-20T15:02:39,400 [qtp573262513-45704] DEBUG
> > > > unity.server.web.EnquiryWellKnownURLViewProvider: Enquiry form
> > > > DataHub-
> > > > GFZ_TestmanagementJoinEnquiry is not applicable
> > > > 
> > > > I saw that the user was in past in the group. We checked if the
> > > > user is
> > > > already in the group, but he is not. There is not open enquiry
> > > > of
> > > > this
> > > > user. Do you have some further hints for us, why the user can't
> > > > follow
> > > > this enquiry?
> > > Yes, however there is bunch of points to be verified.
> > > 
> > > 1. Please note down the enquiry form in question condition (if
> > > not
> > > empty) and other general settings (is it sticky? is it by
> > > invitation
> > > only?) - basically everything that is on the first screen of the
> > > enquiry
> > > configuration in console.
> > It's sticky and by invitation only. Targeted group is / and only if
> > the
> > upman manged group is not in groups attribute. Automation has auto
> > accept if "validCode == true" and the addToGroup statement.
> > 
> > > 2. For that user in console in the root group please check what
> > > is a
> > > value (if any) of the FilledEnquiries attribute. Note that this
> > > is
> > > system attribute, by default hidden, in attributes viewer you
> > > have to
> > > enable showing such in the menu. (<- I think this is the most
> > > likely
> > > to
> > > be the reason)
> > The user only has the sys:policy-agreement-state attribute but not
> > the
> > FilledEnquiries attribute.
> 
> 
> It took a while, but I was finally able to reproduce and understand
> what 
> happens.
> 
> So in this case the user U is invited with some email E1, but has 
> account in Unity with email E2. In such case, Unity will show the 
> registration form after following the registration link, but the user
> has an option to switch to an enquiry if wants (i.e. can decide that 
> instead of creating a new account will bind another, the existing one
> with E2). And this fails as after switching to enquiry, Unity stops
> to 
> treat the user as invited (as invitation was sent to E2).
> 
> I'll open a ticket to fix that.
> 
> For the workaround: invitation with the registered email (i.e. E1) 
> should work perfectly. It will also work if the join enquiry is not
> set 
> as "by invitation only". But AFAIR it was don one some (other)
> purpose, 
> right?
> 
> Best regards,
> Krzysztof
> 

-- 
Federated Systems and Data
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Volker Rieke
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht,
Prof. Dr. Frauke Melchior
-----------------------------------------------------------------------
-----------------------------------------------------------------------