[Feature] Invite Parent Organization Users to a Child Organization for B2B Application Functionalities

[ShanChathusanda93]

Is your feature request related to a problem? Please describe.

In a B2B scenarios, some child organization may need to get some help from the parent organization to perform tasks in the child organization. For this requirement a user in the parent organization can be invited to the child organization. This invitation process can be happen from several ways.

1. Invitation initiation happens from a user in sub org

• Existing users at the parent org are invited from the child org and provide the permissions to manage the application in the child org.
• If the user does not have an account in the parent organization the ability for the user to register is provided only based on the fact if self registration is allowed or not from the parent org to the respective service.

2. Initiation happens from a user in parent org

• In this case the parent organization will give administrative access for an existing user in the parent org to manage resources of a child org.

Describe the solution you would prefer

Invitations should be initiated from a privileged user in a organization and after the invitation is accepted by the parent organization user, that user should be onboarded to the corresponding child organization.

[AnuradhaSK]

@ShanChathusanda93 and @dasuni-30
Please link all the public PRs related to this feature in a comment

[asekawa]

@Shenali-SJ is there is a particular build version that we can test this feature , or else please do attach a version / build pack which we can test this feature within the eod.

cc:@AnuradhaSK

[ShanChathusanda93]

Hi Team,

Followings are the API and BE layer PRs for the feature.

• API Layer

  1. Add API Layer for Organization User Invitation MGT identity-api-server#472
  2. Improve the organization user invitation APIs identity-api-server#488
  3. Add to the product-is : Add organization user invitation APIs to the product #16533

• BE

  1. Core Service : Add organization user invitation management core service wso2-extensions/identity-organization-management#221
  2. Unit tests for Core Service : Add unit tests for organization user invitation management wso2-extensions/identity-organization-management#228
  3. Permissions for product-is : Add permission scopes for organization user invitation APIs carbon-identity-framework#4853
  4. Permission for invitation accept API : Add permission to invitation accept API carbon-identity-framework#4891
  5. User Sharing : Add organization user sharing for child organizations wso2-extensions/identity-organization-management#229
  6. User Invitation jar to the product-is : Add organization user invitation management jar to the distribution wso2-extensions/identity-organization-management#232
  7. Improvements : Improve organization user invitation flows wso2-extensions/identity-organization-management#235 , Improve organization user invitation and user sharing wso2-extensions/identity-organization-management#238
  8. Event handler config for send invitation : Add support to enable/disable the event handler wso2-extensions/identity-organization-management#236 , Improve configuration handling in the invitation event handler wso2-extensions/identity-organization-management#237
  9. Email template : Add organization user invitation email template wso2-extensions/identity-event-handler-notification#204
  10. Permission defining : Add permissions for organization user invitation wso2-extensions/identity-organization-management#263
  11. Scope binding : Add organization user invitation scope binding wso2-extensions/identity-inbound-auth-oauth#2209
  12. DB schema : Add db scripts for organization user invitation feature carbon-identity-framework#4850

Best regards,
Shan.

[Shenali-SJ]

Please find the below FE PRs.

• Add support for inviting users from parent organization to sub-organization identity-apps#4286
• Update the super dropdown identity-apps#4343