Defy User Management

Authentication

LMS

User authentication to the LMS can happen one of two ways:

• Sign in with email and password
• Sign in with DefyVentures - preferred
  • Uses OAuth
  • Requires an active account on the LCMS

CMS

Authentication to CMS can only happen one way:

• Sign in with email and password

Registration

LMS

Registering users on the LMS happens automatically any time an LCMS user sets their password and the is_edx_registered flag on their account is set to False. The flag prevents the LCMS from attempting to register a user in edX every time they change their password.

CMS

While it's possible for anyone to request access to the CMS thru CMS registration it is likely for our purposes that every user accessing the CMS will also have a Defy LCMS account. With that in mind, the process for creating users on the CMS should go like this:

• Create a user in the LCMS
• User sets password in the LCMS (User is registered on LMS in background)
• Admin visits http://studio.defyventures.org/admin and manually sets the user's password

After that the user will be able to login with their assigned password at http://studio.defyventures.org.

Todo

Set LCMS defy_admin user's password automatically in edX every time they change their password in the LCMS. This would avoid the Admin overhead of needing to assign passwords during registration and avoid users needing to update their passwords on both sites.