That's a tricky question.
I do not want to send a Fax to Salesforce to deactivate email confirmation because
i am afraid of faxes I'm quite in a hurry, and I don't want to do it by hand for 500 users. Their emails were badly set at the beginning, so now that I need to reset their passwords, I am looking for a workaround.
Could it be:
- Simulating 500 forms POST requests, one for each user ?
- Using SOAP API ?
- Being a wizard ?
Since the actual email adress is not valid, I can not send a new password before the valid email is confirmed by the user.
And since it is based on a User which has no Contact, SingleEmailMessage will refuse to be sent without a valid WhatId ( pretexting "lies" BTW Salesforce board discussion )
edit: Users cannot be deactivated because we do not want to reset their access to records, because the org is a refresh from prod which is running since 2009. Tricky I said.