[keycloak-dev] verify email is skipped if no email

Vlastimil Elias velias at redhat.com
Fri Jun 12 09:11:42 EDT 2015


Hi

On 11.6.2015 09:58, Stian Thorgersen wrote:
> I reckon we need a way for a realm to define what profiles are available for a user, which are required, and to be able to add verification for each field.

+100. Verification of fields defined this way should be performed for 
submit of all related forms - "register user", "update profile" in acc 
mgm and "update profile on first login".
But config of required should also be used to evaluate "Show "update 
profile" page on first login only when some mandatory field is missing" 
feature.

> We can then use the verification to find out what details are missing and show only the required fields on the update profile form.

It depends on usecase. For example in our case we prefer to show all 
user profile fields on "update profile on first login" form and only 
visually mark which are mandatory, so users must add missing mandatory 
values there, but he can also change existing one or add optional values 
if he wants.


Vl.
>
>
> ----- Original Message -----
>> From: "Vlastimil Elias" <velias at redhat.com>
>> To: keycloak-dev at lists.jboss.org
>> Sent: Thursday, 11 June, 2015 9:57:05 AM
>> Subject: Re: [keycloak-dev] verify email is skipped if no email
>>
>>
>>
>> This is covered by https://issues.jboss.org/browse/KEYCLOAK-1371 which
>> allows to configure Identity provider to Show "update profile" page on
>> first login only when some mandatory field is missing. For now user
>> profile mandatory fields are hardcoded (email, first and last name). It
>> should be cool to allow configuration of which user profile fields are
>> mandatory.
>>
>> Vl.
>>
>>
>> On 10.6.2015 19:13, Stian Thorgersen wrote:
>>> ----- Original Message -----
>>>> From: "Bill Burke" <bburke at redhat.com>
>>>> To: keycloak-dev at lists.jboss.org
>>>> Sent: Wednesday, 10 June, 2015 4:48:17 PM
>>>> Subject: [keycloak-dev] verify email is skipped if no email
>>>>
>>>> The verify email required action is skipped if the user has no email.
>>>> Is this the right behavior?  Should the user instead be required to
>>>> enter in an email address that can be verified?
>>> +1 It doesn't really make sense to require users to verify their email, but
>>> at the same time not require users to enter one
>>>
>>>> --
>>>> Bill Burke
>>>> JBoss, a division of Red Hat
>>>> http://bill.burkecentral.com
>>>> _______________________________________________
>>>> keycloak-dev mailing list
>>>> keycloak-dev at lists.jboss.org
>>>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>>>
>>> _______________________________________________
>>> keycloak-dev mailing list
>>> keycloak-dev at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>> --
>> Vlastimil Elias
>> Principal Software Engineer
>> jboss.org Development Team
>>
>>
>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>

-- 
Vlastimil Elias
Principal Software Engineer
jboss.org Development Team



More information about the keycloak-dev mailing list