-
Q: Is it possible to utilize the API to register a user and if so which function should be used for the registration process?
A: This is the correct API endpoint for Identity Management to register users.
-
Q: Is it possible to have the user input all of their information on an external form including email, name and password during registration so that they are not required to leave the page to set a password or update any information?
A: For the endpoint
publisher/user/register it’s possible to pass everything except the password, but there is another endpoint that allows passing a password described here. -
Q: Are users required to confirm their email address before being registered?
A: No. Only in case Double opt-in is enabled for the application.
-
Q: What is the best API function to check if an email address is already registered?
A: You can use this endpoint to check this. But it’s not necessary to check if the user is registered before calling the registration endpoint because in case a user with the same email address already exists, an error will be returned accordingly.
-
Q: Can we call the API endpoints from our website directly?
A: Don’t call the Piano publisher API endpoints from the front-end, only via the back-end from a secured server. Calling the API endpoints from the website directly (without a service broker or middleware) exposes the API token and is a security risk due to a possible data breach/leakage. (As the API token is publicly available this way and can be compromised)