User registration is the process of adding new users to a Triplesec realm and optionally creating profiles for those users in various applications.

Using the Bundled Regristration Web Application

Bundled with Triplesec is an embedded registration web application. Once you install Triplesec and configure it, perspective users can navigate to this application to create user accounts in your realm.

They can navigate to ${presentationBaseUrl}/registration to create their accounts. Substitute the presentation base URL value you used to configure Triplesec using its Configuration Wizard. If you did not provide a value here then just use the following URL where server is the fully qualified host name of the server you installed triplesec on:

http://server:8383/registration

This simple registration application will create a Hauskeys user account for registering users. The user will also have a profile created for them within the demo application so they can login to it for testing their account with the Hauskeys application provisioned to their cell phone. The profile is only created if the demo application has been enabled and installed.

After a user registers the created user is disabled and needs to be activated by the user. The registration application sends a notification to the user via SMS or Email to provision the Hauskeys application to their cell phone. During registration the user specifies the provisioning and notification mechanism.

After downloading and installing Hauskeys (by SMS or Email) the user is sent another notification message to activate their account. This message contains a URL they can navigate to and activation is automatic since the URL contains an embedded activation code. Once the account is activated users can now generate HOTP values and login to the demo application using their new Hauskeys account.

Using the Admin Tool to Add Additional Application Profiles

In real world applications you're going to want to add additional user profiles after users register to other applications so users can log in to them. You can use the Triplesec Administration Tool to do this.

Once you've configured your application with the Administration Tool you can add new profiles to the application for newly registered users. Simple expand the application node in the tree view and select the profile container node. On the right hand side, you'll see a 'create new profile' form where you can create a profile for your new user. Use the user pulldown to select the user the profile is intended for and add roles, grants and denials as you see fit.

For more information on using the Administration Tool see Administration Tool User's Guide HOWTO.

  • No labels