# Email Verification

### ⚙️ How It Works

* Admin connects a Gmail or Outlook inbox in **Account Settings → Auto-Provisioning**.
* Apps that require email verification can then be linked to this inbox.
* When provisioning runs, Agent Cake checks the inbox for verification emails and follows the magic link or code.
* Admins can monitor connection status, reconnect failed inboxes, or reassign apps to another inbox at any time.

***

### ✉️ Setting Up Email Verification

#### Step 1: Connect an Inbox

1. Go to Settings → Account → *Auto Provisioning*.
2. Click **Connect Inbox**.
3. Select a provider (**Gmail** or **Outlook**).
4. Authenticate with an account that has the right permissions (**service account recommended**).
5. On success → inbox is added with an **Active** badge.
6. On failure → inbox shows a **Failed** badge with a reconnect option.

{% hint style="info" %}
**Google Workspace Users:** If you're using Gmail with Google Workspace, you may need to whitelist the Cakewalk Gmail integration before you can connect your inbox. This requires admin permissions in the Google Admin portal:

1. Go to <https://accounts.google.com/>
2. In the left menu, go to **Security → Access and data control → API controls**
3. In the **App access control** section, click **Manage app access**
4. Click **Configure new app**
5. Add `876594835759-1uoinah2ipdjinkhoqho9tugi6bd0a5l.apps.googleusercontent.com` in the **Search for app** input and click **Search**
6. Click **Cakewalk Email Verification**
7. Click **Continue**
8. Select **Trusted** and click **Continue**
9. Click **Finish**
   {% endhint %}

#### Step 2: Manage Inbox Connections

Inbox appears in settings showing:

* **Email address**
* **Connection status** (Active, Failed)
* **Apps linked**
* **Actions:** Reconnect | Delete

{% hint style="info" %}
**Warning:** Deleting an inbox will remove all linked auto provisioning configurations, reverting the affected apps to manual provisioning.
{% endhint %}

#### Step 3: Configure Apps That Require Email Verification

* Go to App Governance → Select app → Provisioning → *Agent Cake*.
* App setup shows a **connected inbox** already preselected (email + status).
* Option to add an alias email address below used for third-party app account (e.g. <provisioning+cursor@company.com>)
* Saved configuration displays the connected inbox in summary view.

***

### 🔒 **Security & Privacy**

* Cakewalk only ever reads emails from the **specific inbox** you connect. No other mailboxes are accessed.
* Only verification-related emails are processed. Regular messages, personal content and other inbox data are never read or stored.
* All data is encrypted in transit and at rest, following industry standards.

***

### 🛠️ Monitoring & Troubleshooting

* **Badges:** Inboxes show *Active* or *Failed* if the connection is no longer valid.
* **Reconnect reminders:** When a connection fails, admins are notified via Email and Slack with a direct prompt to reconnect.
* **Error handling:** Inline error messages in the inbox configuration guide you to reauthenticate or switch providers.

***

### 📘 Best Practices

* Use a **dedicated service account** instead of a personal inbox to keep data fully separate.
* **Dedicated service accounts** are also recommended to maintain auto provisioning workflows, ensuring continuity even if Admins or App Owners leave.
* Reconnect failed inboxes promptly to avoid provisioning delays.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/email-verification.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.