Users Mapped to OIDC Connection Must Verify the Email Address

Knowledge Articles
, , ,
1

Last Updated: Dec 17, 2024

Overview

Two OIDC connections were configured using this document. In the scenario this article addresses, the email verification process for users associated with these connections should be disabled. However, when users attempted to log in, they received the following error message:

BUMMER SOMETHING FAILED! Please verify your email before logging in.

This article clarifies whether it is possible to completely disable email verification.

Applies To

  • OIDC Connections
  • Email Verifications
  • Email Templates
  • Rules

Cause

There was a rule configured to “Force email verification”. This rule did not discriminate between different types of connections:

function (user, context, callback) {
  if (!user.email_verified) {
    return callback(new UnauthorizedError('Please verify your email before logging in.'));
  } else {
    return callback(null, user, context);
  }
}

Solution

Disable the rule mentioned in the cause section. Ideally, do this in a test environment first to avoid any unexpected adverse consequences.

Depending on the number and type of connections that are configured, it is recommended to create an Action to selectively apply the constraint to a specific connection at Login time. This could be achieved via the Event Object.