Set email_verified to true for SAML based enterprise users?

Help
, ,
1

Can I confirm there is currently no way to to set email_verified to true for SAML based enterprise users? I’m basing this off the discussion thread here: Email verification for Enterprise users

If so, does this mean Force Email Verification rule + Verication Email (magic link) will not work for SAML based enterprise users?

2

Hi @ton,

I believe it is still the case that there is no built-in way to set email_verified for SAML-based profiles. We (where I work) are still using the “hack” that I mentioned in that thread you linked to, but that is not guaranteed to continue working. IMO the best solution right now is for the IdP to include an email_verified boolean field in the SAML assertion, if that can be done, which you can map to the Auth0 profile email_verified attribute, rather than relying on the “truthiness” of a string like the email address as I am doing.

1 Like