Page Comparison

Ensure that the "IdentityMgtEventListener" with the orderId=50 ( is set to false. This is the listener for the old implementation of identity management ) is set to false and that the Identity prior to 5.3.0.

Ensure thatthe new Identity Listeners with orderId=95 and orderId=97 are set to true in the <IS_HOME>/repository/conf/identity/identity.xml file.

By default, the properties are configured as shown below. Therefore, if you have not changed the default configurations, you can skip this step. 

<EventListener type="org.wso2.carbon.user.core.listener.UserOperationEventListener" name="org.wso2.carbon.identity.mgt.IdentityMgtEventListener" orderId="50" enable="false"/>
<EventListener type="org.wso2.carbon.user.core.listener.UserOperationEventListener" name="org.wso2.carbon.identity.governance.listener.IdentityMgtEventListener" orderId="95" enable="true" />
<EventListener type="org.wso2.carbon.user.core.listener.UserOperationEventListener" name="org.wso2.carbon.identity.governance.listener.IdentityStoreEventListener" orderId="97" enable="true">

Management console

Do the following steps to test the account creation using the password option.

1. Start the WSO2 Identity Server.

2. On the Main tab in the  Management Console, click  Add under Users and Roles.

3. Click Add new User.

   

   Note
   If you are using the $ character in the email address, make sure to use appropriate escape characters, such as /. Example: abc\$def@gmail.com

4. Fill in the form:

   1. Select the user store where you want to create this user account from the drop-down as the Domain.
      This includes the list of user stores you configured. See Configuring User Stores for more information.

   2. Enter a unique User Name that is used by the user to log in.

   3. Allow users to enter their own password by selecting the Ask password from user option.

   4. Enter a valid Email Address and click Finish.

5. The Identity Server sends an email to the email address provided. The email contains a redirect URL that directs the users to a screen where they must provide their own password.

SCIM 2.0

1. Set the user-schema-extension-enabled property in the <IS_HOME>/repository/conf/identity/charon-config.xml file to true.

   Code Block
   <Property name="user-schema-extension-enabled">true</Property>

2. Now you can use the ask password features using SCIM 2.0. A sample curl commands is given below: 

   Code Block
   curl -v -k --user admin:admin --data '{"schemas":[],"name":{"familyName":"Smith","givenName":"Paul"},"userName":"Paul","password":"password","emails":[{"primary":true,"value":"paul@abc.com","type":"home"},{"value":"paulSmith@abc.com","type":"workdewmi123455@gmail.com"}],"EnterpriseUser":{askPassword:"true"}}' --header "Content-Type:application/json" https://localhost:9443/scim2/Users