Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
Former Member
4 years agoConfirm user before accepting invitation?
I'm writing some scripts to automate on-boarding of new employees. During testing, I noticed it appears to be possible to confirm a new account before the user has accepted the invitation. After runn...
Former Member
4 years agoHey there @phs
I've heard back from our provisioning team's developers and have received word that no you should not be able to confirm users until the invited user accepts the invitation.
Myself and a few other developers tested your case and are not able to reproduce the bug, as I am seeing the following:
op user provision --name "Wendy Appleseed" --email "wendy@acme.org" and the returned user's state is
TRANSFER_PENDING`op user ls
prints Wendy's state as:TRANSFER_STARTED
which is different from what you're seeing ofTRANSFER_PENDING
right after running the provisioning command. Note that the user's state will remain inTRANSFER_PENDING
until their invitation e-mail is sent out.op user confirm "wendy@acme.org"
returns an error:this user cannot be confirmed
- Accept invitation as Wendy
op user ls
prints Wendy's state asTRANSFER_ACCEPTED
- `op user confirm "mailto:wendy@acme.org" succeeds
I've investigated our CLI client code, and it does an explicit check that the user's state must be TRANSFER_ACCEPTED
before they are able to be confirmed - could you confirm their status immediately before calling op user confirm
and see if that is the case?
Also regarding your following comment:
If this is by design, then that would greatly simplify our automation :)
Haha! I know people have asked for this for this exact use case, but unfortunately not.. for the sake of security.
Thanks for reporting this, and hope to hear back from you soon.