MFA OTP email not sent

FSTA
Tera Guru

Hello!

 

We have an issue with MFA by email:
Everything seems to be properly activated, but when the user selects the email option for MFA, the OPT email is never sent. It seems the server does not even generate it, as it does not appear in System Logs > Emails. 


The MFA policy is activated in Multi-factor Authentication > MFA Context.
"Enable Multi-factor authentication" and "Enable email OTP for Multi-factor authentication" properties are set to true in Multi-Factor Authentication > Properties.
In Adaptive Authentication > Authentication Policies > Properties, the property "Enable Authentication Policy" is set to true.
The users have Notifications enabled and "Enable Multifactor Authentication" set to true.
The system can send emails, as we have multiple other emails going out.
What am I missing???

1 ACCEPTED SOLUTION

FSTA
Tera Guru

We solved the problem. The notification was in a different domain.

 

The multifactor.otp.email.notification notification was in domain XYZ, but we were trying to use it in domain ABC. I put the notification in global, then it started to work.

View solution in original post

3 REPLIES 3

GlideFather
Tera Patron

Hi @FSTA,

 

can you replicate this for any other user (yourself or a colleague of yours), to see whether it behaves the same for all the users, or it's just that one user (spam, blocked messages etc).

 

Also, check that user's email has the correct values - corporate and personal email, check whether it's as expected...

———
/* If my response wasn’t a total disaster ↙️ drop a Kudos or Accept as Solution ↘️ Cheers! */


@GlideFather , yes we have checked the spam folder, recreated the issue with multiple users, using different emails, on different instances. We have ensured the the user can receive email from the instance by clicking the "Forgot password?" link instead.

 

All the pieces seem in place, the multifactor.email.otp event is triggered and processed, but the system does not generate the email.

FSTA
Tera Guru

We solved the problem. The notification was in a different domain.

 

The multifactor.otp.email.notification notification was in domain XYZ, but we were trying to use it in domain ABC. I put the notification in global, then it started to work.