"Guarded" registration with Ory

[markus-k]

Hi!

I have a question regarding user registration with Ory (Cloud/Kratos):

A customer wants to implement a user registration on his website for some of his clients, i.e. this should not be an open registration to anyone. My general idea is that the customer can create some form of "registration code" for his clients, which can be used to create a new account (maybe tied to an e-mail address for example). The created account should then be linked to an existing customer database, so I would add the customer id to the identity schema.

Now I'm wondering how this would best be implemented with Ory. The frontend is an SPA (Vue) with an API backend. I've looked at the docs on self-service flows, which quite explicitly states that I should not use the APIs in browser implementations (i.e. make a registration request to our backend, which then validates said token and creates the account via the API).

An after-registration hook seems like a good place to verify the "registration token". Not sure if I can add the customer id to my schema at this point though.

Thank you.

[aeneasr]

Hi @markus-k - it sounds like you are looking for an invite functionality where you only invite certain users to your platform. What you can try is to:

1. Have a form for your invite system (code based, password based, whatever)
2. Collect basic user information (e.g. email etc)
3. Create the user in ory kratos: https://www.ory.sh/docs/kratos/manage-identities/create-users-identities
4. Send recovery code to their account: https://www.ory.sh/docs/kratos/manage-identities/account-recovery#one-time-codes
5. Done!

Alternatively you could also use the import capability to import the users with their password - this would not work with social sign in:

1. Have a form for your invite system
2. Collect user info
3. Create user and import the pasword: https://www.ory.sh/docs/kratos/manage-identities/import-user-accounts-identities#clear-text-password