Email Verification
Email verification is enabled by default, allowing users to enter the verification code sent to their primary or secondary email addresses, with which they registered during enrollment, in order to prove their identity.
Note: Identity360 uses email verification as the default MFA authenticator. Users will be instantly enrolled for email verification using their primary email address or User Principal Name from their associated directory, and it cannot be disabled until after initial setup.
Steps to edit Email Verification
- Navigate to the Application tab and go to Multi-factor Authentication > Authenticators Setup..
- Select Email Verification.
- Click the
icon to modify the email verification settings.
- In the pop-up that appears, click the Select the verification code length drop-down menu to specify the number of characters in the verification code.
- Click Save to finish setting up the email verification authenticator.
- For detailed configuration of advanced email settings, like adding secondary addresses, mandating registration for MFA, and controlling domain names, refer to the Advanced Settings page.
Email addresses that are self-enrolled by users are considered secondary. These self-enrolled email addresses can still be used for verification, but they are not the primary contact details for the account.
To check for primary and secondary emails, follow these steps:
- Navigate to the Reports tab > MFA Reports.
- In the Enrolled Users section, click on the filter icon (
).
- Choose Enrolled Email Address from the drop-down menu.
- Enter your search criteria and click Apply.
- To see the primary and secondary email IDs, click View under the Enrolled Authenticators column for the user you want to check.
- Primary emails can also be found by navigating to Universal Directory > All Users. The primary email addresses are listed in the Email Address column.