Skip to main content

User Registration Management

GeoPulse provides a flexible, hierarchical system to control new user registration. You can disable all registration globally or control email/password and OIDC registration independently.

Enable/Disable Registration

Environment VariableDefaultDescription
GEOPULSE_AUTH_REGISTRATION_ENABLEDtrueMaster switch for all new user registrations. If set to false, all registration methods (email/password and OIDC) will be disabled, regardless of the specific settings below
GEOPULSE_AUTH_PASSWORD_REGISTRATION_ENABLEDtrueEnables or disables user registration via email and password. This is a specific switch that is only effective if the master switch is enabled.
GEOPULSE_AUTH_OIDC_REGISTRATION_ENABLEDtrueEnables or disables new user registration via OIDC providers. Existing users can still log in and link their accounts. This is a specific switch that is only effective if the master switch is enabled

Deprecated Property

Environment VariableReplaced ByDescription
GEOPULSE_AUTH_SIGN_UP_ENABLEDGEOPULSE_AUTH_PASSWORD_REGISTRATION_ENABLED(Deprecated) This property is now deprecated. It still works for backward compatibility but will be removed in a future release. If used, a warning will be logged.

How it Works

The registration system checks both the master switch and the specific registration method switch:

  • To disable all new user registrations:
    GEOPULSE_AUTH_REGISTRATION_ENABLED=false
  • To allow OIDC registration but disable email/password registration:
    GEOPULSE_AUTH_REGISTRATION_ENABLED=true
    GEOPULSE_AUTH_PASSWORD_REGISTRATION_ENABLED=false
    GEOPULSE_AUTH_OIDC_REGISTRATION_ENABLED=true

If the master GEOPULSE_AUTH_REGISTRATION_ENABLED is false, no new users can register, regardless of the other settings. The UI will hide all registration buttons and links.

Kubernetes / Helm Configuration

Configure in values.yaml:

config:
auth:
registrationEnabled: false # Disable all registration
passwordRegistrationEnabled: true
oidcRegistrationEnabled: true

Apply with: helm upgrade geopulse ./helm/geopulse -f custom-values.yaml

For more details, see the Helm Configuration Guide.

Relationship with Login Controls

Registration controls are independent from login controls:

  • Registration controls (this page) affect new user account creation
  • Login controls affect existing user authentication

Example scenarios:

RegistrationLoginResult
EnabledEnabledNormal operation - users can register and login
DisabledEnabledClosed system - only existing users can login
EnabledDisabledUsers can register but can't login immediately (unusual)
DisabledDisabledComplete lockdown - no registration or login (admins can still login)

For controlling who can log in (not register), see the Login Control Management guide.