Send the "email_verified" Attribute From an LDAP Connector to an Auth0 User Profile
Last Updated:
Overview
Auth0 requires specific enterprise connections to send an email_verified attribute to set the verification status in the Auth0 user profile. Because Auth0 lacks a direct toggle for this in certain connections and restricts updates via the Management API, the Identity Provider (IdP) must send the attribute directly. Adding a specific configuration to the Profile Mapper of the Lightweight Directory Access Protocol (LDAP) connection resolves this by mapping a boolean value to the attribute during authentication.
Applies To
- Auth0
- Lightweight Directory Access Protocol (LDAP) Connection
- User Profile Mappings
Cause
Auth0 lacks a toggle to set the email_verified attribute to true or false upon login for certain enterprise connections. Additionally, Auth0 restricts updating the email_verified attribute on the user profile through the Management API. Consequently, Auth0 requires the Identity Provider (IdP) to send the email_verified attribute directly.
Solution
How is a Boolean value mapped to the email_verified attribute in the Auth0 profile for an LDAP connection?
Configure the profile mapper to send the email_verified attribute as true upon user authentication by adding the following code snippet:
profile['email_verified'] = true;
