Hi Krzysztof,
Am Donnerstag, den 01.03.2018, 20:48 +0100 schrieb Krzysztof
Benedyczak:
> Hi Sander,
>
> I'd need more details to understand what is wrong in this scenario.
>
> W dniu 01.03.2018 o 11:39, Sander Apweiler pisze:
> > Hi Krzysztof, Piotr,
> >
> > I found another problem. I create a new account using an external
> > IdP.
> > The new account is created and user can log in, although the email
> > address was not confirmed so far.
>
> That is OK, unless this user is logging using this unconfirmed email
> as
> identity (with a local password set in Unity). Us this the case?
> Using
> external authN, if you allowed to create an account, unconfirmed
> email
> is irrelevant (if it is for you, then you should provision the
> account
> after email confirmation, what is also possible).
The mapped identity is eppn.
>
> > Within registration from I created the rule for like it is
> > described in
> > manual and work on other instances with unity 1.x.
>
> Can you provide the details of this?
I created a registration form for the IdP with following Automatically
assigned setting:
condition: attr["email"].confirmed == true
action: autoProcess
action parameter: action = accept
I understood the manual, and in V1 it worked in that way, that the
account is created after the email address was confirmed.
Yesterday, when I tested the integration, my account was created and I
was able to sign in before I confirmed the email address.
> > I don't see the registration within Requests management under
> > Registration & enquiry. Is this the wanted behaviour?
>
>
> You mean there is no registration request, but user was filling it
> and
> it was accepted?
Yes, there are only the request for oauthclients listed. Not the
request from external IdPs. See the attached picture. Registration form
for IdPs is DFN.
Cheers,
Sander
>
> Cheers,
> KB
--
Federated Systems and Data
Juelich Supercomputing Centre
phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...
-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Dr. Karl Eugen Huthmacher
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
Prof. Dr. Sebastian M. Schmidt
-----------------------------------------------------------------------
----------------------------------------------------------------------- |
