Welcome Email -> Password Change

[mhouse]

I was looking at this thread where it suggested that we could commandeer the ‘forgot password’ functionality of the Management API to send a user an email that welcomes them and prompts them to change their password:

Sending Email Invitations For Application Signup

Hi Auth0 Community! I’m trying to implement Send Email Invitations for Application Signup, but am confused on a few things. For context; I am allowing Admin users to create new users using the Management API, using the new user’s email and setting a random password, with the email_verified flag set to false. I’ve read the docs linked about 42.5 times, and still cannot seem to understand where to go from there. When the user is created, right now, an email is automatically sent for them to ver…

My question is how can we retain the functionality of the ‘forgot password’ endpoint? It would be strange for my current users to receive a welcome email template prompting them to change their passwords as if they’re new users.

Thanks in advance.

[sgo]

Hi @mhouse , welcome to the community!

There are two main approaches here:
A.) modifying your Change Password email template to make sense in both a password reset and a new user context, so regardless of how the email was triggered, it won’t be confusing for the end user.
E.g. something like: “Please use this link to reset your password, if you are creating a new account, please use the link to set up your password”

B.) Using the Management API to generate a password reset ticket ( this ticket is the URL that is generated in the normal change password email for you normally ), which could be sent with a completely bespoke email outside of Auth0 to the user as your sign up invitation email.
This would typically require you to make a custom script/app that could fetch a Management API token, request a password reset ticket for the relevant user, then call your email provider’s API to send a “sign up” email with the ticket URL appended.

This allows you to separate the “out of the box” forgot password functionality (and email template) from your sign up flow.

• Auth0 Management API v2

On a related note, the newly added Organisations feature also allows for a built-in invite flow too, with its own email template:

• Auth0 Organizations
• Invite Organization Members

I hope that has helped!

[mhouse]

Thank you for the welcome and reply sgo.

I presented to my team the first option you suggested and that’s what we’re going with for the time being.
I am also working to develop an Amazon SES solution using a custom form hosted by our application and will likely use the management client’s API to change their password.
On that same topic, I wanted to mention real quick that it appears Auth0’s documentation for the management client is down and I wasn’t able to find another copy:
https://auth0.github.io/node-auth0/module-management.ManagementClient.html#deleteUser

Thank you,
MH