System.UserManagement Verify Passwordless Login for BOTH EMAIL and SMS

Question

I have a User that has already validated into the community initially with SMS. The next day, in addition to SMS, this User wants to also validate with EMAIL (because they don't have access to their cell phone to receive the code and need to log into the community with an unverified method). Is this possible?

SCENARIO:

Monday - User logs into Community for first time and registers using initSelfRegistration(SMS) > verifySelfRegistration(SMS).

Tuesday - User attempts to log into Community again, but now they want to use Email (because they don't have their mobile phone) - which method should I leverage from the documentation? (I thought it would be initVerificationMethod() or initRegisterVerificationMethod(), but neither seem to be successful)

ERROR MESSAGES:

initVerificationMethod() - User/Org configuration error: Could not send code due to :Email not verified (okay, I learned that this is for re-sending the verification if the User already has verified their method)

initRegisterVerificationMethod() - This operation is not allowed for internal user profiles. (okay, now I need to know how to allow an existing internal community user to add a verification method in addition to an existing one - so that both checkboxes are checked in the above screenshot: User Verified Mobile Number & User Verified Email)

How can I verify an existing community user (which has already self registered with SMS initially) with EMAIL before they log into the community? - see screenshot

thank you!!!

Answer 1

I have a User that has already validated into the community initially with SMS. The next day, in addition to SMS, this User wants to also validate with EMAIL (because they don't have access to their cell phone and need to log into the community).

Yes it is possible if the user is logged in to community already. They need to verify it first.

Monday - User logs into Community for first time and registers using verifySelfRegistration(SMS)

Tuesday - User attempts to log into Community again, but now they want to use Email - which method should I leverage from the documentation? (I thought it would be initVerificationMethod() or initRegisterVerificationMethod(), but neither seem to be successful)

I am assuming in this the user has not verified the email already. In this case, unless you have verified the user identity, it is not possible to allow user to login with unverified methods.

How can you verify users:

Assuming user signs up via phone and has also added an email (which is not verified).

In this case you can send the the verification link to user email using System.UserManagement.sendAsyncEmailConfirmation as soon as the user is created. Once the user clicks on that links the email is also verified.

Assuming user signs up via phone and a dummy email was added (which is not verified).

In this case you should enable Identity verification for external users from session settings and ask user to change their email. A verification link will be sent by salesforce automatically and on clicking the link, the email will be verified and user can login with both. But you need to be logged in.

Assuming user signs up via phone and has been logged out of community and is trying to log in but has a valid email.

In this case unless you have signed in, you cannot do anything because there is no other way to verify user identity. You can of course send an sync confirmation to user email using method above using a custom page built in community.

Answer 2

My Resolution: Community Users cannot be logged out of the Community, and validate both (individually) SMS and EMAIL methods. They MUST be logged in to validate the other (initially they would validate one when they create their Community User). You do this using the following methods:

UserManagement.initRegisterVerificationMethod(method);

UserManagement.verifyRegisterVerificationMethod(code, method);