Add a Post-Password-Change Email

Feature: It would be really useful to us if there was a built in email template that can be configured to be sent out when a user’s password is changed.

Description: This is a relatively common thing to see out in the wild. When you change your password you receive an email that says “Your password to account [username] was changed on [date] from [location]. If this wasn’t you please click the link below / contact support at [phone no]”
I’m aware we could do this with a “post-password-change” action but then we have to build/implement/deploy an email templating engine to be called by this when an email templating engine is already available inside the product.
Our security team are surprised that this doesn’t already exist as a feature in Auth0 and have requested that we raise it as a feature request.

Use-case: We are moving from Duende Identity Server to SAAS with Auth0 for protecting our paid customer information portal where paying users can log in and get access to commodity data that they are subscribed to.
To help mitigate the risk of account sharing or un-authorized access/password changing we want to be able to notify the account holder when their password has been changed.

Thanks

Simon

Hi @simon.pain,

Thanks for your feedback!

You should be able to use a Post Change Password action script to send an email with your own email provider when this happens.

I recommend reviewing our Send an email after the user changes their password via Post Change password action script reference for an example.

Thanks,
Rueben