Introduction

Webkul Marketplace Seller Invitation for Magento 2 transforms your open marketplace into a curated, invite-only vendor platform. It empowers store administrators to govern and restrict seller registrations, ensuring only vetted merchants who receive an official invitation link can open a vendor shop.

In a standard Magento 2 Multi-Vendor Marketplace, any registered customer or public visitor can choose to become a seller during registration or through their customer account dashboard. While open registration works for some marketplaces, growing enterprises require rigorous vetting to maintain catalog quality, verify business credentials, prevent spam or fraudulent sellers, and protect brand reputation.

The Seller Invitation extension solves this by disabling open seller onboarding. Only vendors who receive a secure, cryptographically random, single-use invitation link from the store administrator can register as a seller.

Why Use Seller Invitation for Your Marketplace?

Operating an enterprise multi-vendor marketplace presents distinct seller management challenges:

1. Unvetted Merchant Sign-Ups: Open registration allows unauthorized or fraudulent users to establish storefronts without administrative pre-qualification.
2. Catalog Dilution & Counterfeit Risk: Unchecked seller influx can flood your store with duplicate, counterfeit, or substandard product listings.
3. Onboarding Administrative Overhead: Disapproving unqualified sellers after they register wastes administrative hours and creates vendor friction.
4. Targeted Vendor Recruitment: Strategic marketplaces often recruit specific manufacturers, brands, or regional sellers, requiring private, branded onboarding channels.

How Webkul Seller Invitation Solves It

The Webkul Marketplace Seller Invitation module provides an end-to-end invite-only infrastructure:

• Restricted Public Registration: When enabled, the extension conceals the standard "Do You Want To Become A Seller / Vendor?" option on public sign-up forms. Uninvited visitors can only register as regular retail customers.
• Cryptographic Single-Use Links: Invitations generate a 16-character unique random token (inviteCode). Once an invitee completes registration, the token is permanently consumed and marked as Registered, preventing reuse or forwarding.
• Configurable Link Expiration (TTL): Administrators can enforce a link expiration window (in hours). Prospective sellers must complete registration before the timer elapses.
• Resend Expired Invitations: If a prospective merchant misses their registration deadline, the administrator can dispatch a fresh invitation link to that email address.
• Support for Both New and Existing Customers:
  • New Sellers: Clicking the link opens the sign-up page with the invitee's name and email pre-filled, locks seller registration mode (is_seller = 1), and reveals the Shop URL verification input.
  • Existing Customers: If an invited email matches a registered customer account, the invitation email prompts them to log in. The Become Seller panel validates their active invite code and unlocks vendor registration.
• Anti-Abuse Rate Limiting & Hashing: Backend invitation dispatch includes SHA-256 payload hashing and remote IP rate limiting (maximum 5 requests per 60-second window) to block automated spamming or accidental double clicks.
• Dedicated Admin Invitation Log: A comprehensive UI component grid displays all dispatched invitations with recipient name, email, generated invite code, seller status (Registered / Not Registered), and link status (Active / Expired).
• Live AJAX Shop URL Validation: As sellers input their proposed shop URL, real-time AJAX requests verify store URL availability without page reloads.

Key Features at a Glance