No way to invite Users via Email, Invite, or IdP

Community Support Self-Hosted
, ,
1

Describe the problem The NetBird web UI is missing the “Invite” button under Team > Users and the “IdP Sync” button, which are documented in the official documentation at Add users to your network - NetBird Docs. This prevents users from being able to invite new users to the network as described in the documentation.

To Reproduce Steps to reproduce the behavior:

  1. Go to the NetBird web UI
  2. Navigate to ‘Team > Users’
  3. Look for the ‘Invite’ button (as shown in documentation)
  4. Notice the Invite button is missing
  5. Look for the ‘IdP Sync’ button (as shown in documentation)
  6. Notice the IdP Sync button is also missing

Expected behavior According to the documentation, there should be:

  • An “Invite” button in the Team > Users section to invite new users
  • An “IdP Sync” button for identity provider synchronization Both of these UI elements should be present to allow user management as documented.
  • Theres a notice people can login via emails on first sign-in, but no email is ever recieved and there is not instructions linked to set up in the notice message.

Are you using NetBird Cloud? Self-hosted NetBird control plane (installed using the installation script)

NetBird version 0.46.0

Is any other VPN software installed? No

Additional context

  • This is a brand new installation using the NetBird installation script
  • The documentation clearly shows these buttons should exist, but they are not present in the actual UI
  • This affects the ability to manage users as described in the official documentation

image
image2603×1192 154 KB

2

Hello @Trevor_Smith and welcome to the forum!

As you explained, the buttons to invite users and/or do an IdP sync are features specific to NetBird cloud. As seen here:

IDP sync and direct user invites are a cloud only feature, and the alternative on the cloud side is having it managed by your IdP and over JWT tokens. (For example, I have the following setup for one of my clients).

image
image652×404 34.5 KB

NetBird works the same way, if you want to authenticate users and/or sync their groups. You’ll have to use your IdP. Assign the groups there, and use a JWT sync (groups) to sync up the groups that your users should have. NetBird has opted for not having NetBird manage the login data, unless you are using Cloud. Self-Hosted is relying on a self-hosted IdP for it’s authentication, rather then doing it itself. (As that requires a lot of checks to make sure it all stays secure. Having an industry standard like authentik works better then reinventing the wheel over and over.)

3

Additionally, you mention the email. This would be handled by IdP. You’d have to (I think) create a flow within Zitadel to have it email whoever you invite… through Zitadel and confirm their mail through there. If you go to https://yourdomain.com/ui/console, it’ll bring you to Zitadel.