...
- Configure the EnvSource plugin, if not already done. (If you are reusing an existing plugin configuration, make sure it has exactly the same settings as below.)
- Do not attach a Pipeline to the plugin.
- Set Sync Mode to Manual.
- Enable Sync on Login, if appropriate.
- In the attribute configuration, flag at least one identifier type as Login.
- Create a new Enrollment Flow with the following settings:
- Status: Active
- Petitioner Enrollment Authorization: Authenticated User
- Pipeline: None
- Identity Matching: None
- Require Approval: Optional
- Email Confirmation Mode: Optional
- Email confirmation is not yet fully supported (CO-1624)
- Add CO Person and CO Person Role attributes as appropriate. Do not add any Organizational Identity attributes.
- From the Enrollment Flow configuration page, click Attach Org Identity Sources.
- Click Add Enrollment Source.
- Organizational Identity Source: Select the Env Source you previously configured
- Org Identity Mode: Authenticate
...
- Configure the EnvSource plugin, if not already done. (If you are reusing an existing plugin configuration, make sure it has exactly the same settings as below.)
- Do not attach a Pipeline to the plugin.
- Set Sync Mode to Manual.
- Enable Sync on Login, if appropriate.
- In the attribute configuration, flag at least one identifier type as Login.
- Create a new Enrollment Flow with the following settings:
- Status: Active
- Petitioner Enrollment Authorization: CO Admin, COU Admin, CO or COU Admin, or another suitably restricted setting
- Pipeline: None
- Identity Matching: None or Advisory
- Require Approval: Optional
- Email Confirmation Mode: Automatic or Review
- Require Enrollee Authentication: Yes
- Add CO Person and CO Person Role attributes as appropriate. Add at least a minimal set of Organizational Identity attributes (Official Name and Email, both of which can be copied to CO Person).
- From the Enrollment Flow configuration page, click Attach Org Identity Sources.
- Click Add Enrollment Source.
- Organizational Identity Source: Select the Env Source you previously configured
- Org Identity Mode: Identify
...
- Configure the EnvSource plugin, if not already done. The same EnvSource used for Self Signup can be attached here as well. (If you are reusing an existing plugin configuration, make sure it has exactly the same settings as below.)
- Do not attach a Pipeline to the plugin.
- Set Sync Mode to Manual.
- Enable Sync on Login, if appropriate.
- In the attribute configuration, flag at least one identifier type as Login.
- Create a new Enrollment Flow with the following settings:
- Status: Active
- Petitioner Enrollment Authorization: CO Person
- Pipeline: None
- Identity Matching: Self
- Require Approval: No (unticked)
- Email Confirmation Mode: None
- Do not add any Enrollment Attributes. (You will be asked to add one by default, simply page back or follow the breadcrumbs to skip it.)
- From the Enrollment Flow configuration page, click Attach Org Identity Sources.
- Click Add Enrollment Source.
- Organizational Identity Source: Select the Env Source you previously configured
- Org Identity Mode: Authenticate
...