When I created user via API without any credential...
# feedback
h
When I created user via API without any credentials and then tries to log in via SSO, I’ve got below screen without any active button.
b
Hi, thanks for the report. What would you expect instead? The user has no conceivable to log in, so there is no way to confirm the account linking. This is an edge case, that should not happen in the real world IMO. What's the use case?
h
Hi, I would expect that the user can log in, and the Ory account will be linked with the Google account.
b
The user doesn't have any valid method to log in, so there is no way for the user to confirm that they are the actual holder of the account, and there is no way for the user to log in. Do you have Enable one-time code passwordless enabled on https://console.ory.sh/projects/current/passwordless?
h
Yes, I have enabled one-time code, but I want to display different flow for user without organisations and with organisation. e.g. I created user for abcd.com domain and such user can set the password. But I would like to protect for setting password for uses from e.g. gmail.com organisation. But during user creation process, I don’t have knowledge about organisations, because there is no API for organisations. Does the ory has some solution for this approach?
b
Are you aware of https://www.ory.sh/docs/kratos/organizations? This allows you to create an org for @gmail.com users, who would then only be able to log in/register via the provider added for that organization.
h
Yes, we have created organisations for gmai.com. But in our flow, user form our system should add the new user by email, so we creates a user in Ory without any credentials. Then we send email with the reset password, but during resetting the password I’am not able to check if this email is part of organisation (lacking API for that) and user anyway needs to create a password. It’s a bit out of sens to create a password only for linking the account. Shouldn’t we able to right away signup with SSO if the one time code is authorized? I needed to create our own settings ui with only password reset option