Invited user sign-up experience

When organization members invite other people into their organization, the invitees complete sign-up through a tailored registration experience. This page covers what an invited user sees.

To enable invitations, see Set global access policies and Enable self-serve portal for orgs.

How invited users complete sign-up

Link to this section

When someone accepts an organization invitation, Kinde tailors the registration experience to the invitation:

• Prefilled details — the first name, last name, and email from the invitation are pre-populated on the registration form, so the invited user doesn’t retype them.
• Locked email — the invited email address is read-only and can’t be changed, so the invitation can’t be redirected to a different address. The “use phone instead” option is hidden in this flow for the same reason.
• Sign-up allowed even when self-sign up is off — invited users can complete registration even when the environment has self-sign up disabled. Organization-level “Allow registrations” still applies when an organization is in context.

Invitation error states

Link to this section

To keep invitation status private, Kinde shows consistent messages rather than revealing exactly what’s wrong with a code:

• Invitation disabled — shown when invitations are turned off for the environment, or the configured invite application is misconfigured. See Set global access policies.
• Invitation code not usable — shown when a code can’t be used, including when it’s unknown, expired, or already used. The same user-facing message is shown in every case (which may read “Invitation already accepted”), so the underlying reason can’t be inferred.
• Invitation email mismatch — shown when the email submitted during sign-up doesn’t match the invited email address.