Is there any way to invite users to the application?

Help
, , ,
1

I want something like- ‘Admin sends an invitation mail to a person and if the person accepts the invitation, he gets added as a user’.

5 Likes
2

Yes, Auth0 has the Invite-only Applications feature, as you can see here:

3

Thanks, @paulimar.angulo for your reply. I’m already aware of this invite-only application, but I’m looking for something as simple as dashboard admin invite feature of auth0.

4

@prakharkumar79 Can you please describe what is the exact flow you are looking for?

5

Thanks, @paulimar.angulo for showing interest and responding. With the help of this wonderfull community, I’ve figured out a way to achieve this feature.

6

@prakharkumar79 - can you share what you did in the end?

7

In order to implement the User Invite flow you should follow this doc:

4 Likes
8

Thanks @prakharkumar79, that sounds a lot simpler than the invite-only applications flow. I’ll give it a go…the only problem I can see is ensuring that the password reset email still sounds enough like a password reset email when people do actually want to reset their passwords…
Thanks again

9

In that case you have to use some other template like verification email template instead of change password template. But then you have to do some extra work. First, you have to generate reset password link by using Create a Password Change Ticket endpoint and store this link in the created user’s app_metadata. Second, you have to use liquid syntax in the verification email template to access the link stored in the user’s app_metadata ( like this- {{user.app_metadata.link}} ).

10

I used this method and it was successful at first, but now we’re seeing how features are lost by using the system differently than intended. For example, adding custom fields at signup ( Lock.swift: Custom Fields at Signup) can’t happen with this workflow. It would be great if the version of invitation-only signups we are discussing here could be given full support by Auth0.

3 Likes
11

Agreed @ethan. I still haven’t quite firmed up how I’m going to do this and note that the tutorial linked to by @paulimar.angulo seems to have changed recently. That seems to be a very sensible workflow for invite-only applications but what I am looking for (and which I think must be a very common scenario) is an allowing normal sign-up (and therefore has all the ‘normal’ Auth0 features) but which also allows users to invite other users to join by adding them to some sort of group within the application. I’ll try to remember to post back here if I get it working.

1 Like
12

I find that invite-only tutorial odd. What I take to be the standard invitation-only scenario is one where a permitted user submits one or more email addresses, the owners of which receive an invitation email with a short-lived but fully self-authorizing link to create a new user account. That’s it.

8 Likes
13

@paulimar.angulo this is about an invite workflow, not “invite only” - the difference is the word “only”. The invite-only workflow is clearly tailored to internal use only as users are sent email verification and password reset links straight off the bat - which would be super weird if you just got them out of the blue having no knowledge of what you’ve been signed up to.

1 Like
14

I’ve done something similar, where users apply and are then approved, using a passwordless login flow.

  1. The user fills in a signup form which adds them to Auth0 via the API.
  2. When approved, our code sets an approved flag and triggers a one-time passwordless email via the API.
  3. The user follows the link, and is then automatically logged in to the app. Before they’re activated, they can’t log in as a rule checks the approved flag.
2 Likes