Disable creating users from incoming emails

Use the glide.user.trusted_domain property to specify the comma-separated list of trusted domains used in the creation of users from incoming emails.

An administrator can set the glide.pop3readerjob.create_caller system property to automatically create users from incoming emails. If set this property to the insecure value, the instance automatically creates users from incoming email. Each user created will have the same hardcoded default password which makes bypassing authentication through brute force easier.

Ensure that the glide.pop3readerjob.create_caller system property is set to false.

More information

Attribute	Description
Configuration name	glide.pop3readerjob.create_caller
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	false
Default value	<none>
Fallback value	false
Category	Authentication
Security risk	Severity score: 5.4 CVSS rating: Medium Security risk details: Allowing automatic user creation without strong password controls undermines authentication security and increases the likelihood of system compromise.
Functional impact	None
Dependencies and prerequisites	None

To learn more about adding or creating a system property, see Add a system property.