Two-step registration

[rublin]

Is it possible to enable two-step registration in self-hosted Kratos?
I tried this configuration, but it doesn't work:

2024-05-20 12:17:39 
2024-05-20 12:17:39 The configuration contains values or keys which are invalid:
2024-05-20 12:17:39 selfservice: map[allowed_return_urls:[http://localhost:4455 http://localhost:19006/Callback exp://localhost:8081/--/Callback] default_browser_return_url:http://localhost:4455/ flows:map[error:map[ui_url:http://localhost:4455/error] login:map[lifespan:10m ui_url:http://localhost:4455/login] logout:map[after:map[default_browser_return_url:http://localhost:4455/login]] recovery:map[enabled:true lifespan:1h notify_unknown_recipients:false ui_url:http://localhost:4455/recovery use:code] registration:map[after:map[passkey:map[hooks:[map[hook:session]]] password:map[hooks:[map[hook:session] map[hook:show_verification_ui]]] webauthn:map[hooks:[map[hook:session]]]] enable_legacy_one_step:false enabled:true lifespan:10m login_hints:false ui_url:http://localhost:4455/registration] settings:map[lifespan:1h privileged_session_max_age:15m required_aal:aal1 ui_url:http://localhost:4455/settings] verification:map[after:map[default_browser_return_url:http://localhost:4455/] enabled:false lifespan:1h notify_unknown_recipients:false ui_url:http://localhost:4455/verification use:code]] methods:map[code:map[config:map[lifespan:1h] enabled:true mfa_enabled:false passwordless_enabled:false passwordless_login_fallback_enabled:false] link:map[config:map[lifespan:1h] enabled:false] lookup_secret:map[enabled:false] oidc:map[enabled:false] passkey:map[config:map[rp:map[display_name:Your Application name id:localhost origins:[http://localhost:4455]]] enabled:true] password:map[config:map[haveibeenpwned_enabled:true haveibeenpwned_host:api.pwnedpasswords.com identifier_similarity_check_enabled:true ignore_network_errors:true max_breaches:0 min_password_length:8] enabled:true] profile:map[enabled:true] totp:map[enabled:false] webauthn:map[config:map[passwordless:true rp:map[display_name:Brama id:localhost origin:http://localhost:4455]] enabled:true]]]
2024-05-20 12:17:39              ^-- validation failed
2024-05-20 12:17:39 
2024-05-20 12:17:39 The configuration contains values or keys which are invalid:
2024-05-20 12:17:39 selfservice.flows.registration: map[after:map[passkey:map[hooks:[map[hook:session]]] password:map[hooks:[map[hook:session] map[hook:show_verification_ui]]] webauthn:map[hooks:[map[hook:session]]]] enable_legacy_one_step:false enabled:true lifespan:10m login_hints:false ui_url:http://localhost:4455/registration]
2024-05-20 12:17:39                                 ^-- validation failed
2024-05-20 12:17:39 
2024-05-20 12:17:39 The configuration contains values or keys which are invalid:
2024-05-20 12:17:39 selfservice.flows.registration.after: map[passkey:map[hooks:[map[hook:session]]] password:map[hooks:[map[hook:session] map[hook:show_verification_ui]]] webauthn:map[hooks:[map[hook:session]]]]
2024-05-20 12:17:39                                       ^-- doesn't validate with "#/definitions/selfServiceAfterRegistration"
2024-05-20 12:17:39 
2024-05-20 12:17:39 The configuration contains values or keys which are invalid:
2024-05-20 12:17:39 selfservice.flows.registration.after: map[passkey:map[hooks:[map[hook:session]]] password:map[hooks:[map[hook:session] map[hook:show_verification_ui]]] webauthn:map[hooks:[map[hook:session]]]]
2024-05-20 12:17:39                                       ^-- additionalProperties "passkey" not allowed
2024-05-20 12:17:39 
2024-05-20 12:17:39 The configuration contains values or keys which are invalid:
2024-05-20 12:17:39 selfservice.flows.registration: map[after:map[passkey:map[hooks:[map[hook:session]]] password:map[hooks:[map[hook:session] map[hook:show_verification_ui]]] webauthn:map[hooks:[map[hook:session]]]] enable_legacy_one_step:false enabled:true lifespan:10m login_hints:false ui_url:http://localhost:4455/registration]
2024-05-20 12:17:39                                 ^-- additionalProperties "enable_legacy_one_step" not allowed
2024-05-20 12:17:39 
2024-05-20 12:17:39 The configuration contains values or keys which are invalid:
2024-05-20 12:17:39 selfservice.methods: map[code:map[config:map[lifespan:1h] enabled:true mfa_enabled:false passwordless_enabled:false passwordless_login_fallback_enabled:false] link:map[config:map[lifespan:1h] enabled:false] lookup_secret:map[enabled:false] oidc:map[enabled:false] passkey:map[config:map[rp:map[display_name:Your Application name id:localhost origins:[http://localhost:4455]]] enabled:true] password:map[config:map[haveibeenpwned_enabled:true haveibeenpwned_host:api.pwnedpasswords.com identifier_similarity_check_enabled:true ignore_network_errors:true max_breaches:0 min_password_length:8] enabled:true] profile:map[enabled:true] totp:map[enabled:false] webauthn:map[config:map[passwordless:true rp:map[display_name:Brama id:localhost origin:http://localhost:4455]] enabled:true]]
2024-05-20 12:17:39                      ^-- additionalProperties "passkey" not allowed
2024-05-20 12:17:39 
2024-05-20 12:17:39 time=2024-05-20T09:17:39Z level=error msg=Unable to instantiate configuration. func=github.com/ory/kratos/driver.NewWithoutInit file=/project/driver/factory.go:43 audience=application error=map[message:I[#/selfservice] S[#/properties/selfservice] validation failed
2024-05-20 12:17:39   I[#/selfservice/flows/registration] S[#/properties/selfservice/properties/flows/properties/registration] validation failed
2024-05-20 12:17:39     I[#/selfservice/flows/registration/after] S[#/properties/selfservice/properties/flows/properties/registration/properties/after/$ref] doesn't validate with "#/definitions/selfServiceAfterRegistration"
2024-05-20 12:17:39       I[#/selfservice/flows/registration/after] S[#/definitions/selfServiceAfterRegistration/additionalProperties] additionalProperties "passkey" not allowed
2024-05-20 12:17:39     I[#/selfservice/flows/registration] S[#/properties/selfservice/properties/flows/properties/registration/additionalProperties] additionalProperties "enable_legacy_one_step" not allowed
2024-05-20 12:17:39   I[#/selfservice/methods] S[#/properties/selfservice/properties/methods/additionalProperties] additionalProperties "passkey" not allowed stack_trace:stack trace could not be recovered from error type *jsonschema.ValidationError] service_name=Ory Kratos service_version=v1.1.0
2024-05-20 12:17:39 Error: I[#/selfservice] S[#/properties/selfservice] validation failed
2024-05-20 12:17:39   I[#/selfservice/flows/registration] S[#/properties/selfservice/properties/flows/properties/registration] validation failed
2024-05-20 12:17:39     I[#/selfservice/flows/registration/after] S[#/properties/selfservice/properties/flows/properties/registration/properties/after/$ref] doesn't validate with "#/definitions/selfServiceAfterRegistration"
2024-05-20 12:17:39       I[#/selfservice/flows/registration/after] S[#/definitions/selfServiceAfterRegistration/additionalProperties] additionalProperties "passkey" not allowed
2024-05-20 12:17:39     I[#/selfservice/flows/registration] S[#/properties/selfservice/properties/flows/properties/registration/additionalProperties] additionalProperties "enable_legacy_one_step" not allowed
2024-05-20 12:17:39   I[#/selfservice/methods] S[#/properties/selfservice/properties/methods/additionalProperties] additionalProperties "passkey" not allowed
2024-05-20 12:17:39 Usage:
2024-05-20 12:17:39   kratos serve [flags]
2024-05-20 12:17:39 
2024-05-20 12:17:39 Flags:
2024-05-20 12:17:39   -c, --config strings   Path to one or more .json, .yaml, .yml, .toml config files. Values are loaded in the order provided, meaning that the last config file overwrites values from the previous config file.
2024-05-20 12:17:39       --dev              Disables critical security features to make development easier
2024-05-20 12:17:39   -h, --help             help for serve
2024-05-20 12:17:39       --sqa-opt-out      Disable anonymized telemetry reports - for more information please visit https://www.ory.sh/docs/ecosystem/sqa
2024-05-20 12:17:39       --watch-courier    Run the message courier as a background task, to simplify single-instance setup
2024-05-20 12:17:39 
2024-05-20 12:17:39 I[#/selfservice] S[#/properties/selfservice] validation failed
2024-05-20 12:17:39   I[#/selfservice/flows/registration] S[#/properties/selfservice/properties/flows/properties/registration] validation failed
2024-05-20 12:17:39     I[#/selfservice/flows/registration/after] S[#/properties/selfservice/properties/flows/properties/registration/properties/after/$ref] doesn't validate with "#/definitions/selfServiceAfterRegistration"
2024-05-20 12:17:39       I[#/selfservice/flows/registration/after] S[#/definitions/selfServiceAfterRegistration/additionalProperties] additionalProperties "passkey" not allowed
2024-05-20 12:17:39     I[#/selfservice/flows/registration] S[#/properties/selfservice/properties/flows/properties/registration/additionalProperties] additionalProperties "enable_legacy_one_step" not allowed
2024-05-20 12:17:39   I[#/selfservice/methods] S[#/properties/selfservice/properties/methods/additionalProperties] additionalProperties "passkey" not allowed

[vinckr]

Hello @rublin

Can you walk me through the exact steps you took please?
E.g.

1. Run Ory Kratos version X in Docker using this command: docker ...
2. ....

[vinckr]

@rublin

This is the key you need to set: /services/identity/config/selfservice/flows/registration/enable_legacy_one_step=false

[rublin]

thanks for the reply. We created a two-step (actually, multistep) registration by ourselves.