# Organization invitation flow

**URL:** <https://community.auth0.com/t/organization-invitation-flow/85868>\
**Category:** Get Help\
**Tags:** organizations, invitations\
**Created:** [June 24, 2022, 11:04am UTC](https://community.auth0.com/t/organization-invitation-flow/85868 "2022-06-24T11:04:06Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Const](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/const/32/33856_2.png) [@Const](https://community.auth0.com/u/Const)\
**Post date:** [June 24, 2022, 11:04am UTC](https://community.auth0.com/t/organization-invitation-flow/85868/1 "2022-06-24T11:04:06Z")

</div>

I repeat the same process mentioned in closed [topic](https://community.auth0.com/t/invite-only-allow-signup-from-invited-but-no-one-else/73642/13)

1. I Created redicrect flow from my local app and added loging url in application configuration with redirect to /authorization?..whatever&invitation=xxx&organization=yyy
2. I send invitation from auth0 dashboard
3. Received email and clicked on link  
=== This is where things go wrong per my understanding
4. See a window with proposal not to entry a new password (this is already is wrong), but to reset password.
5. Ok, clicked forgot password
6. Entered an email again!!! (why do I need to, you already know my email)
7. No email received (well, it makes sense because user not yet created)
8. In organization, user mentioned as pending

What I’m doing wrong?

UPD

1. I don’t see this invited user in users database
2. This documentation is very [vague](https://auth0.com/docs/manage-users/organizations/configure-organizations/send-membership-invitations) I need to guess too many things for person who just wants getting things done. Especially not mentioned that you absolutely have to have a working HTTPS endpoing which could redirect to auth0 with invitation parameter
3. I read this [link](https://auth0.com/docs/manage-users/organizations/configure-organizations/invite-members) but here’s also no related information on what should I expect when I do this
4. I tried to replicate enrollment via REST API, no difference, user asked to enter existing password instead of password creation right away

I created a GH [project](https://github.com/rlconst/inviter) to send invites manually till organization invitation will be fixed.

---

<div class="post-metadata">

**Author:** ![Const](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/const/32/33856_2.png) [@Const](https://community.auth0.com/u/Const)\
**Post date:** [August 9, 2022, 9:31am UTC](https://community.auth0.com/t/organization-invitation-flow/85868/4 "2022-08-09T09:31:43Z")

</div>

Ok, I managed to workaround this problem

1. I allowed to both personal and org login
2. in my application when user logged in, I calculate the most probable organization assuming that 99% users will have only one
3. initiating another login flow now specifying organization I found on step 2

looks ugly but at least end-user does not see this back-and-forth

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [August 22, 2022, 11:04pm UTC](https://community.auth0.com/t/organization-invitation-flow/85868/5 "2022-08-22T23:04:42Z")

</div>

Hey @Const thanks for sharing your workaround and welcome to the community!

Do you have an [application login uri](https://auth0.com/docs/authenticate/login/auth0-universal-login/configure-default-login-routes#invite-organization-members) enabled on the application in question? I wasn’t able to reproduce the initial behavior you described when I had this configured in my own environment.

---

<div class="post-metadata">

**Author:** ![Const](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/const/32/33856_2.png) [@Const](https://community.auth0.com/u/Const)\
**Post date:** [August 24, 2022, 6:58am UTC](https://community.auth0.com/t/organization-invitation-flow/85868/6 "2022-08-24T06:58:53Z")

</div>

I had a discussion with Support. We identified that password reset flow was done from the management application, not the one I’m using for login. This is why there’s no redirect button. Probably it makes sense to explicitly state it somewhere in documentation, that /!\ you should pay attention to what application is used to reset password.

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [August 26, 2022, 11:29pm UTC](https://community.auth0.com/t/organization-invitation-flow/85868/7 "2022-08-26T23:29:18Z")

</div>

Great, thanks for following up here with the community and appreciate the feedback regarding documentation 🙂

---

<div class="post-metadata">

**Author:** ![ty.frith](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ty.frith/32/58484_2.png) [@ty.frith](https://community.auth0.com/u/ty.frith)\
**Post date:** [September 10, 2022, 11:29pm UTC](https://community.auth0.com/t/organization-invitation-flow/85868/8 "2022-09-10T23:29:36Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.
