# Bug OP-10446 - External auth providers treated as self registration

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-10446

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module |  |
| Target versions | 12.5.0 |
| Observed in versions |  |
| Sprint | 12.5.0 |
| Backlog bucket |  |
| Bug found in version (deprecated) |  |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

If you disable self-registration in OpenProject, even registered OmniAuth providers will not be able to create new accounts. This is not desired for most use cases and has since often been requested by customers

We need to provide the following path:

*   Disable internal (password based) self-registration
*   Allow automatic registration of auth provider such as SAML/OIDC
*   Consolidate automatic activation between different providers
    *   LDAP sync has this already, users will get automatically activated
    *   Other external providers respect the automatic registration