Account Linking

Automatic Linking

Registry will attempt to automatically link records during enrollment. This can happen under a variety of circumstances.

Existing Identifier Detected

If an Enrollment Flow is configured with Authentication Required and Require Confirmation of Email, then the identifier of the currently authenticated user will be collected and attached to the Petition in progress. This identifier will be checked against existing Organizational Identities and an appropriate action taken:

  1. If the identifier is not already known, it is attached to the Organizational Identity created as part of the enrollment.
  2. If the identifier is known and it is already attached to the Petition’s Organizational Identity, no action is taken.
  3. If the identifier is known and it is attached to another CO Person within the CO, the action taken is in accordance with the Enrollment Flow Configuration. 4, If the identifier is known, but it is not attached to any CO Person within the CO, the Petition is automatically re-linked to the previously existing Organizational Identity and the new Organizational Identity created as part of the enrollment is automatically deleted. However, if the new Organizational Identity is already attached to another CO Person within the CO, an error is generated and the situation must be manually resolved.

Self Matching

If an Enrollment Flow is configured with Identity Matching set to Self, then the enrollment is automatically attached to the currently authenticated CO Person. This is typically used for account linking (adding an additional Organizational Identity) or additional Role enrollment.

Organizational Identity Sources

Organizational Identity Sources attached to an Enrollment Flow via Enrollment Sources can cause Registry Pipelines to be executed, which can result in automatic linking of records.

Additional Role Enrollment

There are several ways to process an enrollment for an additional role for an already existing CO Person.

  1. Via Self Service (presumably with Approval), by setting Identity Matching to Self and collecting only CO Person Role attributes.
  2. Via Administrator Enrollment, by setting Identity Matching to Select and collecting only CO Person Role attributes.
  3. Via existing identifier detection, as described above. Unlike the first two options (which only work for existing CO People), this option can be applied to all enrollees (whether or not they are new to the platform – if they are new, CO Person and Org Identity records will be created as needed).

Organizational Identity Linking Operations

An Organizational Identity can be manually linked to an existing CO Person record when the Organizational Identity is not currently linked to a CO Person record within the destination CO.

To create a link:

  1. Select the appropriate Organizational Identity (People » Organizational Identities, then click Edit)
  2. Select the CO People tab.
  3. If the identity is eligible to be linked, a Link button will appear. Click this button.
  4. Find the target CO Person record in the list presented and click Link.
  5. Confirm.

This process can also be initiated via the CO Person Canvas.

An Organizational Identity can be manually moved (relinked) from one CO Person to a different CO Person.

To relink:

  1. Select the original CO Person record (the one to which the Organizational Identity is currently attached) (People » My Population, then click Edit).
  2. In the Organizational Identities section, click Relink next to the appropriate Organizational Identity.
  3. Find the target CO Person record in the list presented and click Relink.
  4. Confirm.

An Organizational Identity can be manually unlinked from a CO Person, when there is at least one additional Organizational Identity attached to the CO Person. Both the Organizational Identity and CO Person will continue to exist independently after being unlinked.

  1. Select the CO Person record (the one to which the Organizational Identity is currently attached) (People » My Population, then click Edit).
  2. In the Organizational Identities section, click Relink next to the appropriate Organizational Identity.
  3. Find the target CO Person record in the list presented and click Relink.
  4. Confirm.

CO Person Role Linking Operations

A CO Person Role can be manually moved (relinked) from one CO Person to a different CO Person.

To relink:

  1. Select the original CO Person record (the one to which the Role is currently attached) (People » My Population, then click Edit).
  2. In the Role Attributes section, click Relink next to the appropriate Role.
  3. Find the target CO Person record in the list presented and click Relink.
  4. Confirm.

Making an existing member an administrator

This needs to be vetted and screen shots are needed

  1. From the COmanage Registry home page, click on your CO.
  2. From the CO welcome page, click on the drop down menu for ‘People’ and select ‘My Population’.
  3. Select the member that you would like to make into a CO admin.
  4. On the member’s page, click on ‘Manage Group Memberships’.
  5. Select ‘member’ on the admin group line.

Copyright (C) 2018-2020 University Corporation for Advanced Internet Development (Internet2) - All Rights Reserved

Read more

370: Extending COmanage Training Customizing the COmanage User Experience