User email verification
To make sure an email address is valid and belongs to the right person, Sitecore Content Hub can verify it automatically or prompt the user to verify their email by clicking a confirmation link.
Verification is automatic, and therefore not required, in the following cases:
-
The user doesn't have an email address.
-
The email address is provided by an SSO service and matches the email in the user profile.
NoteFor SSO users, automatic verification only happens after the user logs in successfully.
Verification is not automatic, and therefore required, in the following cases:
-
An email address is manually added or changed in the user profile.
-
The Content Hub environment doesn't use an external authentication provider.
-
The email address used by the SSO service doesn't match the email address in the user's profile.
When email verification is required, the user receives an email with a confirmation link. Until they click the link, their profile will show an Unverified label in the user list, and they’ll see a banner on every page prompting them to verify their email address. This banner can be dismissed, but it returns after 24 hours or upon re-login.
Users can also set or reset their password directly from the email confirmation screen, after verifying their email address. The verification email and the password reset email are valid for 1 day (24 hours).
You can send up to 10 verification emails per user per day, and up to 15 verification emails per email address every 30 days. Whichever limit is reached first will block further emails.
For example, if you send 10 verification emails to John Doe's email address [email protected] on Monday, they won't receive any more verification emails until Tuesday even if they change their email address because the user has reached the 10 emails per day limit. On Tuesday, you can only send 5 email notifications to [email protected] because the email address will reach its 15 emails per month limit.