I think the right approach is to use [1]. UserSelfRegistrationService will
add users to the Identity role by default. But, if you want to add the user
to the subscriber role, you can make it configurable.

Also - with UserSelfRegistrationService - you can specify to which user
stores you need to add users.

Thanks & regards,
-Prabath


On Wed, Jan 22, 2014 at 11:22 AM, Lalaji Sureshika <[email protected]> wrote:

> Hi,
>
> With current WSO2 APIStore self signup functionality,we do support only
> for super tenant APIStore. We are planning to extend it to support for
> tenant users as well.
>
> With current signup approach, we do two web service calls as;
> 1) call  "UserSelfRegistrationService" to add the user
> 2) call  "UserAdmin" to assign the subscriber role to the user
>
> With above approach,for the 2) call,we need to authenticate and thus need
> to have admin credentials predefined.But in tenant mode,to do above 2) we
> cannot keep tenant admin credentials predefined in a config file and use.
>
> Thus without doing above 2) web service call,we are going to achieve the
> role assignment from writing a custom user store listener implementation
> and do the role-assignment as a PreAddUser operation.This way,it'll not
> required to keep tenant admin/super admin credentials and will only do one
> web service call for signup.
>
> Appreciate your feedback on this.
>
>
>
> Thanks;
>
> --
> Lalaji Sureshika
> WSO2, Inc.;  http://wso2.com/
> email: [email protected];
> blog: http://lalajisureshika.blogspot.com
>
>
>
> _______________________________________________
> Architecture mailing list
> [email protected]
> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
>
>


-- 
Thanks & Regards,
Prabath

Twitter : @prabath
LinkedIn : http://www.linkedin.com/in/prabathsiriwardena

Mobile : +94 71 809 6732

http://blog.facilelogin.com
http://blog.api-security.org
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to