User stuck in Verify Email loop with Keycloak

Solution Verified - Updated -

Issue

We have configured our realm to prompt the user to provide (via Update Profile required action) and verify an email address on first login.
If the user enters an incorrect (but valid) address, and so does not receive the issued verification email, they cannot log in, and they can't change the email address. Hence there is no way to progress. Subsequent login attempts also send the verification email without allowing the user to change the address.

Is there a way to configure the realm/auth flow to allow the user to resolve this issue and log in, without writing custom authenticator code?

Environment

  • Red Hat build of Keycloak
    • 24.0.5

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content