What is the suggested way to register users for the application.

[Alik2015]

Given my new application which has a register page. What is the best way to register users into idserver? Also would the login by the user be done using idserver views and pages, or is it possible to log the user in using some api call? If there is any code in the project that can show this would be perfect.

Thanks in advance.

[simpleidserver]

Hello @Alik2015 ,

In SimpleIdServer, it is possible to configure one or more Manual Provisioning Workflows. These workflows are used by anonymous users to create their local accounts and provision their credentials.

For example, the URL https://openid.simpleidserver.com/master/registration?workflowName=pwd is used to create a local account with password authentication.

For more information about Manual Provisioning Workflow, please read the documentation : https://simpleidserver.com/docs/iam/manualidentityprovisioning

If you do not wish to use a Manual Provisioning Workflow, your website can call the Users API to create a local account using the following steps:

1. Configure your client to have access to the users scope.
2. Obtain an access token that is valid for the users scopes.
3. Execute an HTTP POST request to create a user. The technical identifier of the user must be returned.

HTTP REQUEST
Target : https://openid.simpleidserver.com/master/users
Method : POST

Body :
{
"name": "user",
"firstname": "firstname",
"lastname": "lastname",
"email": "email",
"claims": { }
}

4. Use the technical identifier of the new user to update the credential as follows:

HTTP REQUEST
Target : https://openid.simpleidserver.com/master/users/{id}/credentials
Method : PUT

Body :
{
"type": "pwd",
"value": "PASSWORD"
}

[simpleidserver]

Did-you click on the button Get New Access Token ?

[Alik2015]

Got it working had to add different url for those who will try you need https://oauth.pstmn.io/v1/callback in the redirect list.

If I wanted to retrieve this by c# I would use M2M instead of web application right?

[simpleidserver]

You can use M2M :)

[Alik2015]

Thanks sorry going through this bit by bit. The following does not seem to work

PUT https://localhost:5001/master/users/cc6ede55-dccc-4c42-8dbb-b00e582470f9/credentials
405
72 ms
JSONError: No data, empty input at 1:1

Body is clearly set.

[simpleidserver]

I have created a Postman project to update the user's password.

Ticket610UpdatePassword.postman_collection.json

To accomplish this, add a new password credential and set it as active. Please execute this request:

HTTP POST

URL : https://localhost:5001/master/users/3efc07bd-c603-403f-ba47-f3242b12207d/credentials

Body :

{
    "active": true,
    "credential": {
        "type": "pwd",
        "value": "pwd"
    }
}

To update a specific credential, please execute this request:

HTTP PUT :

URL : https://localhost:5001/master/users/3efc07bd-c603-403f-ba47-f3242b12207d/credentials/{{credentialId}}

Body :

{
    "value": "newpwd"
} 

[Alik2015]

@simpleidserver appreciate your responses. I tried using access token for current logged in user to call /master/userinfo endpoint and found that /userinfo does not include the user identifier id. Would I need to add manually if it is what I need, or is there another way to obtain this. Also is the docs with example of calling the api's for example /api/userinfo using my token returns 400 invalid token yet /master/userinfo works fine.

[simpleidserver]

I made some modifications in the master branch to add the possibility of including the Id property into a custom claim.

First, add a mapping rule to the OpenID scope.

Navigate to the administration website and execute the following tasks:

1. Open the Scopes screen and navigate to the Openid scope.
2. Select the Mappers tab and click on the Add mapper button.
3. Choose Property and click on Next.
4. Fill in the form as follows and click on save:

Property	Value
Name	id
Token Claim name	id
Claim JSON Type	string
User property	Id

5. Open the Clients screen and click on the Add client button.
6. Select Web application and click on the Next button.
7. Fill-in the form like this and click on the Save button.

Property	Value
Identifier	postman
Token Claim name	password
Name	postman
Redirection URLS	http://localhost

Finally, import the following Postman project.

Ticket610.postman_collection.json

It contains two HTTP requests:

• The first one uses the authorization code grant-type to get an access token.
• The second one calls the /master/userinfo endpoint to get the JSON.

This JSON is returned by the userinfo endpoint and contains the technical identifier of the user: