BenW.76757 (Customer) asked a question.
Secondary email alternatives
Using secondary email for provisioning new Okta accounts, for password resets, and for account unlocks is insecure since we cannot be certain about the controls protecting the secondary email. A bad actor could compromise the secondary email and use that to access Okta. In our case, the primary email is only accessible via Okta, so we can't use that either. Are there any alternatives to secondary email for creating new Okta users?
+1
It would be extremely helpful, and much more secure, if the options for email notifications to secondary emails were available, say, as a list of checkboxes: ( )New user welcome email, ( ) password resets, ( ) unlock accounts. Being able to select trigger only new user emails to a secondary address would truly support the widely touted Employee Lifecycle Management without impacting the security of the overall environment.