Public Sublogin Signup

The base package can show a guest form for someone who wants to join an existing customer account. The feature is disabled by default and should normally create an inactive request for the parent customer or an administrator to review.

Enable the request form

Open Stores > Configuration > MageB2B > Sublogin > Public signup.

1. Set Enable public sublogin signup to Yes for the intended website.
2. Save configuration.
3. Open /sublogin/signup/index under the store's base URL.

The applicant enters the existing parent customer's email, their own details, a unique email, password and password confirmation.

Approval flow

A new request always starts inactive. The parent customer receives the public signup approval email containing a confirmation link; following that link activates the sublogin. An administrator can also activate the record in Admin.

Understand the security boundary

The form checks that the named parent email exists. Knowing that email does not prove the applicant belongs to the company — the approval step is the control that establishes membership.

Before approving, verify the person through your normal company process, such as an approved contact or internal directory. The confirmation link is a credential: do not forward the approval email outside the account owner's hands.

What a public request does not grant

A new request does not receive permission to create sublogins and is not subscribed to the newsletter by default. Role, group, budget, catalog and approval values still need an explicit assignment where those add-ons are installed.

Test the flow

1. Use a fictional parent customer in staging.
2. Submit a request with a normal-looking demo email.
3. Confirm duplicate emails and mismatched passwords are rejected.
4. Confirm the new record is inactive.
5. Review and activate it through the intended account-management route.
6. Test sign-in and checkout.

Related: Email and Account Recovery and Create Your First Sublogin.