Social registration scenarios
| Social authentication is deprecated and will be removed in a future release of IDM. For more information, see Deprecation. |
When users connect to IDM with a social identity provider, it could be the first time they’re connecting to your system. They could already have an regular IDM account. They could already have registered with a different social identity provider. This section describes what happens during the self-registration process. The process varies depending on whether there’s an existing account in the IDM managed user store.
The following list describes each item in the flow shown in the adjacent figure:
-
From the IDM End User UI, the user selects the
Registerlink -
The self-registration Interface returns a
Register Your Accountpage at{hostname}/#/registrationwith a list of configured providers. -
The user then selects one configured social identity provider.
-
IDM connects to the selected social identity provider.
-
The social identity provider requests end user authentication.
-
The end user authenticates with the social identity provider.
-
The social identity provider prompts the user to accept sharing selected account information.
-
The user accepts the conditions presented by the social identity provider.
-
The social identity provider notifies IDM of the user registration request.
-
IDM passes responsibility to the administrative interface.
-
IDM uses the email address from the social identity provider, and compares it with email addresses of existing managed users.
-
If the email address is found, IDM links the social identity information to that account (and skips to step 16).
-
IDM returns to the self-registration (Self-Service) interface.
-
The self-registration interface prompts the user for additional information, such as security questions, and reCAPTCHA, if configured per Google reCAPTCHA.
-
The user responds appropriately.
-
IDM creates a new managed user. If the user has already been created, IDM reviews data from the social identity provider, and updates the user data for the managed/provider to conform. In this case, the provider is a social identity provider such as Google.
-
The user is redirected to the
Success URL.