Nuxeo Platform User Registration

The Nuxeo Platform User Registration add-on enables users to invite external users to access a specific space of the Platform or a limited set of spaces. The invitations must be approved by an administrator of the Platform.

Installation

This addon requires no specific installation steps. It can be installed like any other package from the Update Center or using the nuxeoctl command line.

When you have installed the package, as an admin, you have three new sub tabs under the Manage tab of any folderish document:

• User invitation
• Bulk invitation
• User registration requests

You also have a new User Registration tab in the Admin tab.

Configuration

Setting Up Email Sending

The Nuxeo Platform User Registration add-on sends email to the invited user with his credentials. So your Nuxeo server must be able to reach an e-mail server. This is the same configuration that the one required for the email alerts to work. See how to enable e-mail alerts.

Global Configuration

The administrators can set up some configuration directly from the Admin > User registration > Configuration tab.

Possible configuration options are:

Functional Overview

The user registration process takes three steps:

1. A user with Manage everything right invite one or several persons to access a workspace (or another type of space).
2. The administrators of the application review this invitation and accept or reject it.
3. If the invitation has been accepted by the administrators, an email is sent the invited user(s) so he validates his invitation. If the invitation has been rejected, it is canceled.

Inviting Users

Inviting a Single User to the Platform

Users with Manage rights on workspaces or section can invite users to the Platform.

To invite a user:

1. Click on the User invitation sub tab.
2. Fill in the form (see below for details).
   ×
   
3. Click on the Invite user button. The administrators now have to approve the invitation so the invited user receives an invitation by email.

Invitation form details

Inviting Several Users

It is possible to invite several users at the same time. You just need to provide their email addresses and indicate what permission they will have on the space. After the administrator has approved the invitations, the invited users receive an email to validate their invitation.

To invite several users at the same time to a space:

1. Click on the Bulk invitation sub tab.
2. Fill in the form (see below).
3. Click on the Invite list button. The administrators now have to approve the invitations so the invited users receive an invitation by email.

Bulk invitation form details

 

Managing Pending Invitations

When users invite external people to access the Platform, a new user account is created for this new external user. This is why the invitation must be accepted by an administrator before the invitation is actually sent.

Invitations can have different statuses:

• created: A local manager invited a user; administrator now have to approve or reject the invitation and the required user account creation.
• accepted: An administrator has approved the invitation; the needed user account is created and an invitation email is sent to the user.
• rejected: An administrator has refused the invitation and the creation of the required new user account.
• validated: The invited user has confirmed he received the invitation by clicking on the validation link in the invitation email.

Accepting an Invitation

To accept an invitation:

1. Click on the sub tab User registration requests of the space. You can also see all invitation requests from the Admin > User Registration tab.
   ×
   

2. Click on the Accept link of the invitation to validate. The invitation now has the state Accepted. You can then:

   • Click on revive. It will resend a new mail to the user to remember him he has been invited.
   • Delete the invitation. It will cancel the creation of the account if the user has not already enter his password.
   • Click on Validate. It will finalize the invitation process.
     ×
     
     The invitation email is sent to the user, who will need to validate his invitation by clicking a link in the email.

Rejecting an Invitation

To reject an invitation:

1. Click on the sub tab User registration requests of the space. You can also see all invitation requests from the Admin > User Registration tab.
   ×
   
2. Click on the Reject link of the invitation to validate. The invitation now has the state Rejected.

Validating Your Invitation

When you have been invited to a workspace, a folder or any type of space in the Nuxeo Platform, you get an email with a link to validate your invitation.

1. Click on that link to validate your invitation.
2. Create your password by typing it.
   ×
   
3. Log in to the Nuxeo Platform.

Technical Configuration Overview

The user registration contributes to the nuxeo-invite and nuxeo-webengine-invite modules.

Default Configuration of the User Registration

<extension target="org.nuxeo.ecm.user.registration.UserRegistrationService"
             point="configuration">
    <configuration merge="true">
      <requestDocType>UserRegistration</requestDocType>
      <container>
        <docType>UserRegistrationContainer</docType>
        <parentPath>/management/</parentPath>
        <name>registrationRequests</name>
        <title>Registration Requests Container</title>
      </container>
      <validationEmail>
        <title>You are invited to access Nuxeo</title>
        <template>skin/views/userRegistration/EmailInviteDocTemplate.ftl</template>
      </validationEmail>
      <reviveEmail>
        <title>You are invited to access Nuxeo</title>
        <template>skin/views/userRegistration/ReviveEmailInviteDocTemplate.ftl</template>
      </reviveEmail>
      <enterPasswordUrl>site/userRegistration/enterpassword/</enterPasswordUrl>
      <validationRelUrl>site/userRegistration/validate</validationRelUrl>
      <registrationUserFactory>org.nuxeo.ecm.user.registration.DefaultRegistrationUserFactory</registrationUserFactory>
    </configuration>
  </extension>

You can contribute to the default user registration configuration or add your new configuration by adding a specific name attribute in the configuration tag. 

Each user invitation request is actually a document stored in a specific container. In the default configuration, requests are stored under /management.

• The container type is UserRegistrationContainer. The folder is created if it does not exist. It has the facet RegistrationConfiguration to store the configuration name of the request object.
• The user registration request documents have the type UserRegistration that store all request metadata (username, email etc) thanks to the UserInvitation facet.

---