Hi all! :wave: Ory supports multiple identity sche...
# ory-network
p
Hi all! 👋 Ory supports multiple identity schemas with different traits, but the self-service registration flow seems to only support the default schema. How can I implement two separate registration pages—one for users of schema A and another for users of schema B? Is there a way to specify which schema to use per registration flow? I know I can create identities via the Admin API, but in that case, I can’t set a password without hashing it myself, which adds complexity I’d like to avoid. Any ideas?
h
Hey, this is on the immediate roadmap and will make it into the next release and will be on ory network first. Can’t give exact times for ory network but likely this month even
p
great news! thank you 🙂
Hello! I’ve been testing this feature to better understand how it works. when I start a flow with:
Copy code
curl --location '<https://mydomain.com/self-service/login/api?identity_schema=schema-uuid>'.  // or /browser
My assumption is that only users belonging to that schema
(schema-uuid)
should be able to log in for the flow.. but while playing with the feature I see that users from other schemas can still log in and receive a cookie. Is my understanding correct, or how is this flow supposed to work?
s
This is not a restriction, but used as a "hint" for rendering the correct form and inputs.
p
I see.. thanks for clarifying it.
s
Any user can also start a new flow with a different ID, so there is no point in restricting this.
p
I see what you mean. My thinking was: I have Page A and Page B — users of schemaA should log into Page A, and users of schemaB should log into Page B. So instead of allowing any user to log into Page A and then logging them out or showing an error, I thought this call could enforce that directly... but again I get your point, and any user could just change the param and force it.
s
It sounds like you should rather use two separate projects tbh
p
Ah, coming back to this...´ wouldn’t it be fine to have a single project with multiple user types? Essentially, UserA and UserB would just represent different global RBAC roles. for fine grained permissions I use keto