How can I implement invitation-based enrollment with social signup

[recursiveGecko]

I'm working on an invite-only web application and I'd like to use Authentik for authentication. I want invited users to be able to enroll with Username/Password, Discord, or Google login.

How is the invitation enrollment flow supposed to be structured to make this possible? So far I have:

1. Invitation stage
2. Identification stage(Is this correct? It's the only way I could figure out how to add options to sign up with Discord/Google)
3. Prompt stage

The problem is that after the user logs in with Discord, they're sent to the default enrollment flow associated with the Discord source, but I need to get them back to the original invitation flow so that I can prompt them for some details required for the specific application they've been invited to, and to add them to the right groups.

P.S. In the future I might have other applications (that don't require invites) which also support logging in with Discord, so I don't want to tailor the default enrollment flow for Discord source for this specific use case. I need a way to resume the original invitation enrollment flow which ensures that the user started the flow with a valid invite.

[tilllt]

I cannot answer your question since i have a similar one. After a day of LLM questioning, i come to the conclusion that what i want to do is currently not possible with authentik... unless some of the the experts know the trick...

#17276

[recursiveGecko]

Yeah I don't think it's possible to do this with Authentik alone, but it should be possible to achieve this kind of signup experience with external code (e.g. custom web application) to orchestrate or "drive" everything. I was just hoping to avoid that as it would simplify everything.

I think I found a related issue: #12512

[tilllt]

I must admit that i dont completely understand WHY it is not possible, since it seems such a common scenario, especially in a Non-Profit / Community Setting.

• You offer some kind of service to a diverse group of people (sports club, teachers association, your hobby group etc)
• Sending out invitation is too much work for admin so you offer self enrollment and hand out a link
• To make it easy for them to sign up, you offer as much social login integrations as possible
• If you are offering services for more than one different group of people, you cannot directly let them access any service. You need to identify which sign-up belongs to which group and assign the corresponding permissions.