User getting created when trying to sign in with the identity which doesn't exist

Added " Allow user creation on login " checkbox in Hybridauth -> Widget Settings configuration to decide user creation is possible on user login.

Andy,
I saw the configuration but this is to block new user accounts creation and only allows users to login who already hold account in the system. It gives a error message "New account registration is not allowed." when any new user tries to signup.

I completely agree with you about blocking the registration using the "Who can register accounts?" => "Nobody, only login for existing accounts is possible" setting.

My requirement is to provide setting to decide whether to allow or deny new account creation when user tries to login to the application using his social network credentials (i.e FB, Google...). I tried logging into my application with my FB credentials, though i don't have account it simply created a new account from login screen and redirected me into the user profile page and this not i am expecting and it should show a error to the user like " You are not allowed to login in with provided credentials. Please register up to create new user account. " if we are not allowing user creation from login page.

Let me know if you still have queries or concerns.

Thanks,
Karthik

Andy,

You are right though we can block the user registrations through Hybridauth but registrations from "Create new account" are still possible. Right now the module allows creation of user accounts from the login page as well as the signup page. I wanted admins to control/decide whether new users creation is allowed or denied from the login page.

I want to make sure if user doesn't have a account in our application the only possible way to create account is from the signup/registration page but not form login page (treating them as they are already users of the application and creating user data for them.)

Steps to reproduce :

1) Configure Facebook widget(as example) and make the widget available on Login and Registration forms.
2) Open "user/login" page click on Facebook icon and enter the valid Facebook credentials.
3) It creates a account and redirects to the user profile page.

I want to control the step 2 by checking if the user email address is already assigned to any user in the application, if not don't create a account straight away show a validation message that you have to register into the application first.

I hope you are clear. Let me know if you still have concerns/suggestions.

Thanks,
Karthik

Removing the variable "hybridauth_widget_user_creation" on uninstallation of module.