ReuvenF.04865 (Customer) asked a question.
Activate user only after clicking on the email verification/activation link
Hello and thank you for your support.
I know this question was already addressed in the past, but all answers i found were outdated ( 3 years ago ) and i would like to know if there is a new solution to this issue.
The flow i am trying to achieve:
- Create new user with username/password.
- User gets created in OKTA with status: STAGED.
- Send Email with Activation/Verify link (Click on the link).
- User gets activated only after verifying his mail ( and not before ).
Currently after sending POST request to /api/v1/users/${userId}/lifecycle/activate?sendEmail=true the user indeed gets an email but is set to status: ACTIVE before he clicks on the link.
Is there a way set the user status to ACTIVE only after he verify his mail?
Thanks.
Hello @ReuvenF.04865 (Customer),
Thank you for posting.
Please check the following thread with information related:
https://stackoverflow.com/questions/40348072/implementing-e-mail-verification-in-okta
Regards,
Natalia
Okta Inc.
Hi @User16254393570754125507 (Okta) , Thank you for your answer.
I have already seen the thread in the link you provided, unfortunately it doesn't really help, the person in the thread is facing the same problem and did not get any useful answer.
Currently the flow that i am making:
As you can see, i use the query param "sendEmail" and set it to "true".
However, after the POST request the user's status changes to ACTIVE immediately without waiting for him to verify his mail ( He can log in to his account without verification).
Is there any way to prevent the user from being ACTIVE before he verify his email?
Thanks.