Does anyone have an idea how we can verify that users are still in possession of their original email address? Our usecase is that we allow access based on their employer’s domain. If people leave their employer, they will still have access to our Discourse install. This could be a compliancy issue. Anyone have done something like this, in a user friendly fashion? The only option I have is to suspend all users, forcing a re-activation, but that seems a bit hostile.

[image] Bas: verify that users are still in possession of their original email address You can use the “deactivate” button in the admin panel to force a specific user to re-validate their email address. If you want to automate the process we have this plugin: https://github.com/discourse/discourse-auto-deactivate But it only deactivates ‘inactive’ users. If a user leaves the company it won’t deactivate them immediately.

[image] david: You can use the “deactivate” button in the admin panel to force a specific user to re-validate their email address. Yeah, that’s the route I was going to take. Feels a bit hostile, but might be needed once a year or so. [image] david: If you want to automate the process we have this plugin: Fantastic! We can modify that one re-authenticate all [image] pfaffman: How many employers are there? Could they let you know somehow? More than 100, it’s not practical unfortunately.

Establish current ownership of email?

Product Support

pfaffman (Jay Pfaffman) April 8, 2019, 2:51pm 3

How many employers are there? Could they let you know somehow?

Topic		Replies	Views
Forcing users to reverify email Feature	7	323	September 19, 2025
Repeat verification Product Support	2	400	January 8, 2020
Should a deactivated user receive an email? Bug email , approval	12	724	July 4, 2025
How to deactive account of those users who're not receiving emails Product Support	4	803	November 10, 2022
Deactivated Account Still Receives Emails Feature email	7	3463	March 23, 2016

Establish current ownership of email?

Related topics