Hi,
I would like to know what is the difference between EnableUserCreation and EnableOpenServer.
According to the links, those settings are described as follows:
EnableUserCreation:
- true: (Default) Anyone can sign up for a user account on this server without needing to be invited. Applies to email-based signups only.
- false: The ability to create accounts is disabled. Selecting Create Account displays an error. Applies to email, OpenID Connect, and OAuth 2.0 user account authentication.
EnableOpenServer:
- true: Users can create accounts on the server without an invitation.
- false: (Default) Users must have an invitation to create an account on the server.
It says both will allow users to create their accounts without invitation. But only setting “EnableUserCreation” to true doesn’t allows users to do so, but also “EnableOpenServer” needs to be set to true. So now I wonder what “without needing to be invited” means in “EnableUserCreation” description.
I would like to restrict the user creation only via invitation. So I wonder if there’s any risks that unexpected users sign up for our mattermost by having it set to true.