Getting started with ForgeRock Identity Cloud journeys: Part 4 -

Author:

Rajesh Rajasekharan

Created at:

Jul 2023

Updated at:

Mar 2024

This is Part 4 of 8 in the series Getting started with ForgeRock Identity Cloud journeys.

Self-registration journey ~15 minutes

In the Customer Identity and Access Management (CIAM) space, the best way to onboard millions of customers into an infrastructure is to give them the option to self-register.

The Registration sample journey in ForgeRock Identity Cloud is useful in creating a self-registration process for the users.

This guide takes you through the Registration journey and shows how it can be modified to include additional capabilities.

Examining the Registration journey

  1. In a supported browser, log into your Identity Cloud Admin UI.

  2. In the alpha realm, go to Security > Security Questions.

    Note that in the Questions tab, there is one question configured by default.

  3. Click the Settings tab to view the Security Questions policy.

    https://backstage-community-prod.storage.googleapis.com/original/2X/9/9a54c8d1c7bd0d567880e458a78246c80ffad12c

  4. On the left navigation pane, click Terms & Conditions.

  5. Click on the default Terms & Conditions defined on the page.

    https://backstage-community-prod.storage.googleapis.com/original/2X/a/aad28e0b55be4c7bce6a45d516cca891a68ef889

  6. Click ← Terms & Conditions to return to the Identity Cloud Admin UI landing page.

  7. On the left navigation pane, click Journeys > Registration.

  8. Edit the Registration journey by clicking on the preview image.

    https://backstage-community-prod.storage.googleapis.com/original/2X/0/09ce7d1dfe5c4be763f2687dc4766dd2564da324

    At the start of this journey, the nodes in the Page Node prompt end users to provide the information required to create their account such as username, password, profile attributes, the answers to security questions, and acceptance of the Terms and Conditions defined.

  9. In the Page Node, click the Attribute Collector node. Notice the parameters under the Attributes to Collect property.

    https://backstage-community-prod.storage.googleapis.com/original/2X/4/427fce7fe1b972b7b4e30b6f701d2359fc1cbf66

    This property lists all the attributes a user is expected to provide an answer to during self-registration. Attributes added here are necessary to keep a user’s profile complete upon registration. A common practice is to keep the self-registration process simple with only minimum attributes and have users complete their profile using Progressive Profiling in their subsequent login journeys.

    The journey then uses the Create Object node to create a user profile in the Identity Cloud.

    The journey increments the login count attribute of the new user created and displays the end user dashboard.

Testing the Registration journey

  1. In the alpha realm of your Identity Cloud tenant, go to Journeys > Registration.

  2. Copy the preview URL of the journey.

  3. In a browser different from the Identity Cloud administrator active session, paste and go to the journey preview URL.

    The Page Node with all the collector nodes appears as a registration form.

    https://backstage-community-prod.storage.googleapis.com/original/2X/1/19af235fdc45cfd8816191ef93ef31c017be103d

  4. Complete the form with appropriate responses and click Next.

    A new user created is created and logged into the Identity Cloud end user dashboard.

  5. Sign out of the end user dashboard.

  6. To view the newly created user account details, go to your Identity Cloud Admin UI > Identities > Manage.

Modifying the Registration journey to add additional capability

To prevent bots from signing up, you can modify the journey by adding an authentication node that prompts the users to pass a CAPTCHA test. This journey makes use of the Google reCAPTCHA service, so for it to work, use an active Google account to perform the following steps.

  1. Go to https://google.com/recaptcha.

  2. Click V3 Admin Console.

  3. Sign in using a Google account, if prompted.

  4. Click + at the top right corner of the admin console.

  5. Using the following information as reference, register a new site.

    • Label: ForgeRock Identity Cloud

    • reCAPTCHA type: reCAPTCHA v2 (keep the default option beneath it checked)

    • Domains: forgeblocks.com

    • Check Accept the reCAPTCHA Terms of Service

    • Click SUBMIT

      https://backstage-community-prod.storage.googleapis.com/original/2X/5/5cc76d26b8e808e85ff3456e20fbf30a3698448a

  6. Copy and keep the Site Key and Secret Key handy.

    https://backstage-community-prod.storage.googleapis.com/original/2X/3/31782eabb68e9f39c93c7ecf80ddefebe86f5ce4

  7. In the alpha realm of your Identity Cloud Admin UI, go to Journeys > Registration > … menu and select Duplicate.

    https://backstage-community-prod.storage.googleapis.com/original/2X/7/709d1140bb21b0743cc4dde4c1971d16174ea8bc

  8. Replace the default name of the duplicate journey with the name ‘RegisterMe’ and set the description to “Platform Registration Tree with Google reCAPTCHA”.

    https://backstage-community-prod.storage.googleapis.com/original/2X/1/1df7a1fe8b6a8b634f332cfe13af849dc64bd9e9

  9. Click Save.

  10. On the edit page of the newly created ‘RegisterMe’ journey, click and drag the CAPTCHA (Risk) authentication node.

  11. Connect the nodes as follows:

    • Start node → CAPTCHA node.

    • CAPTCHA node True outcome → Page Node.

    • CAPTCHA node False outcome → Failure node.

      https://backstage-community-prod.storage.googleapis.com/original/2X/2/2216d4ac51ca8e0699b6713c821365642e188656

  12. Click on the CAPTCHA node and complete the Site Key and Secret Key in the respective node properties.

    https://backstage-community-prod.storage.googleapis.com/original/2X/a/af4dd124571981eb6e89169251615df0e3d45e15

  13. Click Save to save the journey.

Testing the modified Registration journey

  1. In a browser different from the Identity Cloud administrator active session, paste and go to the ‘RegisterMe’ journey preview URL.

    The Google reCAPTCHA challenge page is displayed.

    https://backstage-community-prod.storage.googleapis.com/original/2X/2/22c046a17dfbdf18e92e3be429ee80c1b07b369f

  2. Verify the CAPTCHA and click Next.

    The journey proceeds to show the registration page.

  3. Complete the journey as appropriate.

Further reading

Other guides in the Getting started with ForgeRock Identity Cloud journeys series: