Blocked Account Email Unblock Link Fails with Custom Domain

This article explains why the unblock link for a blocked account email fails to work when using a custom domain. The issue occurs when an end user attempts to unblock their account by clicking the link in the email, which results in an error page. Other email templates function correctly with the custom domain.

• Blocked Account Email Template

• Custom Domains

The custom domain is self-managed, and the unblock URL from the email template is not allowed in the reverse proxy configuration. With self-managed custom domains, customers are responsible for operating a reverse proxy that forwards requests from their custom domain to Auth0's infrastructure. This setup gives customers control over their own TLS certificates and allows for things like custom Web Application Firewalls (WAFs). The unblock URL generated by the Blocked Account Email template directs the user to a specific endpoint required for the unblocking process. The reverse proxy needs to be configured to forward requests for this particular path to Auth0. When the proxy receives a request for a path it doesn't know how to handle, it likely defaults to redirecting the user to a configured error page.

Add the URL from the Blocked Account email template to the reverse proxy configuration.