Can't invite user from backoffice if not logged in through Umbraco ID

[skttl]

Issue description

When I sign in using my Umbraco ID credentials I get the Invite button as expected:

However, if I sign in using my Entra ID credentials (same user profile in Umbraco, just different login method), the Invite button is nowhere to be found:

Is this expected?

Umbraco system information
--------------------------------
Server Troubleshooting: 
Server OS: Microsoft Windows 10.0.20348
Server Framework: .NET 9.0.5
Default Language: da-DK
Umbraco Version: 16.3.4
Current Culture: en-US
Current UI Culture: en-US
Current Webserver: IIS
Models Builder Mode: SourceCodeManual
Runtime Mode: Development
Debug Mode: False
Database Provider: Microsoft.Data.SqlClient
Current Server Role: Single

Server Information: 
Umbraco build version: 16.3.4+0d2393d
Umbraco assembly version: 16.3.4
Server time offset: 00:00:00
Runtime mode: Development

Client Information: 
Umbraco client version: 16.3.4

Current user: 
User is admin: Yes
User sections: Umb.Section.Content, Umb.Section.Forms, Umb.Section.Media, Umb.Section.Members, Umb.Section.Packages, Umb.Section.Settings, Umb.Section.Translation, Umb.Section.Users
User culture: en-US
User languages: All
User document start nodes: 

Temporary file configuration: 
Max allowed file size: Not set (unlimited)
Allowed file types: 
Disallowed file types: ashx, aspx, ascx, config, cshtml, vbhtml, asmx, air, axd, xamlx
Image file types: png, apng, jpg, jpeg, jfif, gif, bm, bmp, dip, ppm, pbm, pgm, tga, vda, icb, vst, tiff, tif, webp, qoi

[mikkelhm]

Hi Søren,

Thanks for commenting. This is one of the inherent limitations of the External Login Providers feature. When you're using your own login provider, we lack visibility into user provisioning—specifically, we don't know how user creation is handled within your configured External Login Provider.

The invite flow normally checks if the user exists, then routes them to either a signup or sign-in page. The challenge is the signup path: we can't determine the appropriate user creation process, and attempting to build a generic flow results in an experience that's either too rigid or overly convoluted. Consequently, we remove the invite button when an External Login Provider is configured.

With Umbraco ID, we control the entire authentication flow. When inviting a user, and you are authenticated via Umbraco ID, we check (by email) whether they already have an associated Umbraco ID account. If so, we send an invite link; if not, we redirect them to the Umbraco ID user creation flow.

This limitation is documented at https://docs.umbraco.com/umbraco-cloud/begin-your-cloud-journey/project-features/external-login-providers#handling-invites-when-using-an-external-login-provider. The current workaround is to provision users directly in your External Login Provider, then send them a manual backoffice link.

Kind regards - Mikkel

[skttl]

I know there is limits in external login providers. But with these we typically just allow for auto creation of users.

What I want with this issue, is to be able to invite new users (who would then become Umbraco ID users), even if I'm not myself logged in using Umbraco ID. I would expect to be able to do that, as long as my user profile in Umbraco had the right permissions.