Within our IDAAS Core solution, we send a couple of emails. This list provides you with an overview of all emails that are being sent.
1) A user initiates a primary email change via the Credential API. We first send an email with a link to confirm the new email address. Once this verification is done, another email is sent to the old email address, notifying that the primary email has been updated.
2) When the user initiates a primary phone number change via the Credential API. A notification email is sent after the primary phone number has been changed successfully.
3) The user gets an activation email when an INACTIVE account is created. The user follows the link in this email to complete the profile completion process.
4) The smart link email. This email contains a one-time login link. This module is optional on the login page.
5) The forgot password flow. We first sent an email containing a reset password link to the user's email address. When users click on the link, they go to a page to set a new password. After that, another email is sent to the user confirming the password has been changed.
6) Email address is already primary. If the user tries to register a new account with an existing email address, an email is sent to that user. This email contains a notification, like - someone is trying to register an account with your email address. If it's not you, please contact support.
7) One-time password (OTP) verification email. For 2nd Factor authentication, you can receive an OTP on your email address (If enabled).
8) A few emails are sent to the invitee or the inviter in the invite flow.
a) Invitation email. This email is sent to the invitee. It contains a link to register a new account or log in with an existing account.
b) Invitation accepted email. This email is sent to the inviter when the invitee has completed the process.
c) Invitation rejected email. This email is sent to the inviter when the invitee clicks on the decline invite button.
d) Invitation expired email. This email is sent to the inviter notifying that the invite they sent has expired.
9) Consent data email. This email is sent when the user clicks on the "obtain your personal data" link on the self-service page. This triggers an email with all the personal data stored in the IDAAS core.