# User invite only flow supporting both usr/pwd and social logins

**URL:** <https://community.auth0.com/t/user-invite-only-flow-supporting-both-usr-pwd-and-social-logins/46670>\
**Category:** Get Help\
**Tags:** invite-only, auth0\
**Created:** [July 21, 2020, 9:21pm UTC](https://community.auth0.com/t/user-invite-only-flow-supporting-both-usr-pwd-and-social-logins/46670 "2020-07-21T21:21:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jgermain](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jgermain/32/22105_2.png) [@jgermain](https://community.auth0.com/u/jgermain)\
**Post date:** [July 21, 2020, 9:21pm UTC](https://community.auth0.com/t/user-invite-only-flow-supporting-both-usr-pwd-and-social-logins/46670/1 "2020-07-21T21:21:40Z")

</div>

I have reviewed the [User Invitation Flow](https://auth0.com/docs/design/creating-invite-only-applications). I need to support both user/pwd and social logins. Can anyone clarify the following?

- For social logins, how is the user invited? I assume the admin is not creating a user and sending a link, right?
- How do we prevent uninvited users from creating user accounts?
- How do we include additional registration select list options (language and organization)?

Appreciate any pointers or helpful links!

---

<div class="post-metadata">

**Author:** ![john.gateley](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/john.gateley/32/10879_2.png) [@john.gateley](https://community.auth0.com/u/john.gateley)\
**Post date:** [July 22, 2020, 1:37pm UTC](https://community.auth0.com/t/user-invite-only-flow-supporting-both-usr-pwd-and-social-logins/46670/2 "2020-07-22T13:37:48Z")

</div>

Hi @jgermain

There is no “invite” for social logins. They are created the first time a user logs in.

What I would suggest is a variation on account linking:  
when a social user logs in, verify they are linked with a email/password account, and fail the login if they are not, or link the accounts if both exist and they are not linked yet(make the user verify ownership of both accounts).

This requires a user to create a email/password account ALWAYS.

A variation on this is to pre-create the email/password account for the user via the management API. This has some complexities to work out.

John

---

<div class="post-metadata">

**Author:** ![hcastillo.mendoza](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/hcastillo.mendoza/32/24699_2.png) [@hcastillo.mendoza](https://community.auth0.com/u/hcastillo.mendoza)\
**Post date:** [December 11, 2020, 10:00am UTC](https://community.auth0.com/t/user-invite-only-flow-supporting-both-usr-pwd-and-social-logins/46670/3 "2020-12-11T10:00:18Z")

</div>

Hi John,  
One question, How you check if exist one social account, I don’t found any documentation about this ☹

Can you help me please!  
Thank you!

---

<div class="post-metadata">

**Author:** ![john.gateley](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/john.gateley/32/10879_2.png) [@john.gateley](https://community.auth0.com/u/john.gateley)\
**Post date:** [December 11, 2020, 2:42pm UTC](https://community.auth0.com/t/user-invite-only-flow-supporting-both-usr-pwd-and-social-logins/46670/4 "2020-12-11T14:42:30Z")

</div>

Hi @hcastillo.mendoza

You can search for users via the management API. Then check to see if the user is a social connection.

John
