cilogon / access-identity

ACCESS Identity Management
https://identity.access-ci.org/
Apache License 2.0
1 stars 1 forks source link

Email address changes require authentication but do not force email address verification #3

Closed jbasney closed 1 year ago

jbasney commented 1 year ago

Requires a COmanage plug-in.

jbasney commented 1 year ago

https://identity.access-ci.org/username-reminder only works with verified email addresses:

No verified email address was found for "jbasney@illinois.edu"

So if user's change their email address without verification, the email reminder won't work for them.

jbasney commented 1 year ago

https://identity.access-ci.org/profile-update updated to ask user to manually initiate email address verification for now.

jbasney commented 1 year ago

COmanage plug-in now triggers email verification automatically. Updated https://identity.access-ci.org/profile-update to ask user to check their inbox for the verification request. Email changes are provisioned to the ACCESS DB only after verification.