@amit

Much of this might be context-specific. Entity Management is an implementation of the Client Credentials grant and may fit your use case. This video offers a useful demonstration:

https://www.youtube.com/watch?v=pJIzYLSTrMM

You may also find this to be useful --> https://github.com/FusionAuth/fusionauth-site/pull/1158/files as well if you are trying to implement certain levels of granularity within your permissions.

Hope this helps!

Thanks,
Josh

I'd use a webhook to provision/deprovision the grants.

https://fusionauth.io/docs/v1/tech/events-webhooks/events/user-registration-create-complete/ has the roles for the application, so in the webhook, you can call the FusionAuth grant API to create or revoke the grant.

For initial setup, run a script to get all the users that have a given role (using a user search query) and then grant them access to all the entities.

Think about what happens when a new piece of equipment is added. From what I gather, all users with the "viewer" role will need to be granted access to that equipment. You can take care that of within the 'new equipment added' script: provision the equipment, then add the grant to all users with the "viewer" role.

Depending on when you are going to check the grant and the number of users and pieces of equipment, this may be a good thing to use a queue like SQS for, to add/revoke/update grants asynchronously.

@stuggiboogie I'm not familiar with ionos. You should check with them to make sure they support java applications or docker applications as well as a shell account and a database. If they can provide these and meet the system requirements, you should be able to run FusionAuth.

System requirements: https://fusionauth.io/docs/v1/tech/installation-guide/system-requirements/

Installation using a package: https://fusionauth.io/docs/v1/tech/installation-guide/fusionauth-app/

Installation using docker: https://fusionauth.io/docs/v1/tech/installation-guide/docker/

@owner

Apologies for the trouble. I believe this may be resolved in the issue below. This should be fixed in the next release of FusionAuth.

https://github.com/FusionAuth/fusionauth-issues/issues/1519

Please see the workaround mentioned in this issue and let us know if this resolves this issue for you.

Thanks,
Josh

@oleksiikraieviy and @vindhyahegde2114

This is going to be related to how you set up a generic messenger - I have a few tips here.

https://www.loom.com/share/cdd0835c054b40a4a3a6e2e32f1c9d04

Thanks,
Josh

@zero-enna

Glad that you got this figured out!

Thanks,
Josh

Hi @johnmiller

One option might be to use a webhook and take action based on this event.

https://fusionauth.io/docs/v1/tech/events-webhooks/events/user-email-verified/

Thanks,
Josh

You can now do so as of FusionAuth 1.32.

More details in the issue 628 linked above.

Tracking here: https://github.com/FusionAuth/fusionauth-issues/issues/1519

@johnmiller --

That sounds good!

Feel free to log an issue if you would like to see this supported in the future.

https://github.com/FusionAuth/fusionauth-issues/issues/new/choose

Thanks,
Josh
FusionAuth

@joshua Thanks for answering
So this is not yet possible and all I can do is thumbs up the issue and wait.

@cgoddard I think this was missing documentation that has now been added: https://fusionauth.io/docs/v1/tech/apis/entity-management/grants/#search-for-grants

Let me know if that doesn't address your question.

@cgoddard I think this topic addresses your question: https://fusionauth.io/community/forum/topic/1389/see-user-and-entity-elasticsearch-indexes-when-running-in-fusionauth-cloud

@lightalakanzam Not with standard fusionauth, because the hosted login pages don't know that the login has occurred.

You could perhaps set a cookie on login with the login API and then look for that cookie in an http proxy in front of FusionAuth, and deny access to the login pages at that time.

Or, you could, if you are only using the login API, set up the theme to have a blank login page.

@jeremy-c-london

Currently FusionAuth doesn't support these as login methods.

This would be custom development work which is typically only offered to enterprise customers, but you can reach out to the sales team to start the conversation.

@joshua Thanks, Josh.

My avatar is happy now 🙂