Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Users can be created using SCIM 2.0. without enabling the askpassword feature. A sample curl command is given below:

curl -v -k --user admin:admin --data '{"schemas":[],"name":{"familyName":"Smith","givenName":"Paul"},"userName":"Paul","password":"password","emails"
Table of Content Zone
maxLevel4
minLevel4
locationtop

Management console

Do the following steps to test the account creation using the password option.

  1. Start the WSO2 Identity Server.

  2. On the Main tab in the  Management Console, click  Add under Users and Roles.

  3. Click Add new User.

    Note

    If you are using the $ character in the email address, make sure to use appropriate escape characters, such as /.
    Example: abc\$def@gmail.com

  4. Fill in the form:

    1. Select the user store where you want to create this user account from the drop-down as the Domain.
      This includes the list of user stores you configured. See Configuring User Stores for more information.
    2. Enter a unique User Name that is used by the user to log in.

    3. Allow users to enter their own password by selecting the Ask password from user option.

    4. Enter a valid Email Address and click Finish.

  5. The Identity Server sends an email to the email address provided. The email contains a redirect URL that directs the users to a screen where they must provide their own password.

SCIM 2.0

Tip
titleBefore you begin!

Follow the steps given in the Configuring SCIM 2.0 Provisioning Connector Documentation to configure WSO2 IS with SCIM 2.0.

  1. Set the user-schema-extension-enabled property in the <IS_HOME>/repository/conf/identity/charon-config.xml file to true.

    Code Block
    <Property name="user-schema-extension-enabled">true</Property>
  2. Now you can use the ask password features using SCIM 2.0. A sample curl command is given below: 

    Code Block
    curl -v -k --user admin:admin --data '{"schemas":[],"name":{"familyName":"Smith","givenName":"Paul"},
    "userName":"Paul","password":"password","emails":[{"primary":true,"value":"shanawso2test@gmaildewmi123455@gmail.com"}],
    "EnterpriseUser":{"askPassword":"true"}
Note
Code Block
:
[{
  1. "
primary":
  1. true
,"value":"paul@abc.com","type":"home"},{"value":"paulSmith@abc.com","type":"work"}],"EnterpriseUser":{askPassword:"false
  1. "}}' --header "Content-Type:application/json" https://localhost:9443/scim2/Users
Panel
titleRelated Links
  • For information on how to edit an existing email template, see Email Templates.
  • By default, the claim values of the identity claims used in this feature are stored in the JDBC datasource configured in the identity.xml file. See Configuring Claims for more information on how to store the claim values in the user store.