Email Verification

Once email verification is enabled, users can enter the verification code sent to their email address to prove their identity.

Prerequisites:

1. The email server must be configured: Go to the Admin tab → Product Settings → Mail/SMS Settings. Complete the configuration steps.
2. The email attributes must be configured: Go to the Configuration tab → Multi-factor Authentication → Advanced → Verification Code.
   
   

   

Steps for configure email verification

1. Navigate to Configuration → Self-Service → Multi-factor Authentication → Authenticators Setup.

2. From the Choose the Policy drop-down, select a policy.

   Note: ADSelfService Plus allows you to create OU and group-based policies. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy. Click Select OUs/Groups, and make the selection based on your requirements. You need to select at least one self-service feature. Finally, click Save Policy.

3. Click Email Verification section.
4. From the Select Type drop-down, Choose below listed options and customize the subject and message as per the requirement which will be used for Email verification:
   • MFA for Password Reset & Account Lock : When user performs Self-service password reset / account unlock.
   • TFA for ADSelfService Plus Login : When user performs login to the ADSelfService portal.
   • Endpoint MFA : When user performs login to the machine [ Windows/Mac/Linux ] physically or remote acces.
   
   
   

   

5. Select Send secure link by e-mail [ This option available only for the type MFA for Password Reset & Account Lock ] to send authentication link to users' emails instead of sending verification code. Users simply need to click the authentication link to prove their identity.
   Note : The Send secure link by email option only works for password self-service actions through a web browser or the login agent, and not for ADSelfService Plus' iOS and Android mobile apps.

6. Click Save