Does anyone have an idea how we can verify that users are still in possession of their original email address?
Our usecase is that we allow access based on their employer’s domain. If people leave their employer, they will still have access to our Discourse install. This could be a compliancy issue.
Anyone have done something like this, in a user friendly fashion? The only option I have is to suspend all users, forcing a re-activation, but that seems a bit hostile.