...
- Configure the EnvSource plugin, if not already done.
- Do not attach a Pipeline to the plugin.
- Set Sync Mode to Manual.
- Enable Sync on Login, if appropriate.
- In the attribute configuration, flag at least one identifier type as Login.
- Create a new Enrollment Flow with the following settings:
- Status: Active
- Petitioner Enrollment Authorization: Authenticated User
- Pipeline: None
- Identity Matching: None
- Require Approval: Optional
- Email Confirmation Mode: Optional
- Email confirmation is not yet fully supported (CO-1624)
- Add CO Person and CO Person Role attributes as appropriate. Do not add any Organizational Identity attributes.
- From the Enrollment Flow configuration page, click Attach Org Identity Sources.
- Click Add Enrollment Source.
- Organizational Identity Source: Select the Env Source you previously configured
- Org Identity Mode: Authenticate
...