I work in a university environment that has in the past offered services almost exclusively to university affiliates who already have "formal" accounts in central user database. We are increasingly offering services to outside collaborators (hosted Subversion/git repositories, Wiki access, etc) that don't fit into this traditional model.
I am looking for a tool that would allow us to manage "lightweight" accounts, whereby "lightweight" I mean that:
- Users would be able to self-register accounts via a web interface.
- Accounts would be verified automatically via some sort of email + verification URL mechanism.
Having an account wouldn't grant access to anything by default (authorization would come through group membership or specific service ACLs). This is a pretty typical model for popular web services, but I'm not having much luck finding a tool that implements this out of the box (and we don't really have the time or resources to write one ourselves).
There are a number of tools out there that provide self-service password change and metadata editing, but I haven't yet found one that handles the registration piece. I was hoping that FreeIPA would handle this, but as far as I can tell it does not.
Are you aware of any tools that would enable this model? I'm open to commercial solutions, if you've had a good experience with something like that.