What is the right way to provide the possibility to login both as an individual and an org member but forbid individual login for org members?

Get Help
,
1

Users may only be members of one org in my project and if they are linked to some org they shouldn’t be able to authenticate as non-org users.

3

Hi @oleksandr.burla,

Welcome back to the Auth0 Community!

Even though there isn’t an out-of-box solution for this particular user case, one way that I think you can achieve this is to check programmatically within your code if the user is a member of an organization ( you can use the Management API and Retrieve User’s Organization Memberships ) and if the array returned is not null, then check the org_Id claim of the IdToken. If this claim is not populated that means a user who is part of an organization has tried to login using an individual account, so you can log them out and display an error message similar to": “Please login as a member of an organization”.

I hope this helps!

Thanks,

Remus

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.