Email Verification

Some apps require email verification (e.g. magic links or codes) during provisioning. By connecting a Gmail or Outlook inbox, Agent Cake can automatically complete these flows when provisioning users.

⚙️ How It Works

• Admin connects a Gmail or Outlook inbox in Account Settings → Auto-Provisioning.

• Apps that require email verification can then be linked to this inbox.

• When provisioning runs, Agent Cake checks the inbox for verification emails and follows the magic link or code.

• Admins can monitor connection status, reconnect failed inboxes, or reassign apps to another inbox at any time.

---

✉️ Setting Up Email Verification

Step 1: Connect an Inbox

1. Go to Settings → Account → Auto Provisioning.

2. Click Connect Inbox.

3. Select a provider (Gmail or Outlook).

4. Authenticate with an account that has the right permissions (service account recommended).

5. On success → inbox is added with an Active badge.

6. On failure → inbox shows a Failed badge with a reconnect option.

Google Workspace Users: If you're using Gmail with Google Workspace, you may need to whitelist the Cakewalk Gmail integration before you can connect your inbox. This requires admin permissions in the Google Admin portal:

1. Go to https://accounts.google.com/

2. In the left menu, go to Security → Access and data control → API controls

3. In the App access control section, click Manage app access

4. Click Configure new app

5. Add 876594835759-1uoinah2ipdjinkhoqho9tugi6bd0a5l.apps.googleusercontent.com in the Search for app input and click Search

6. Click Cakewalk Email Verification

7. Click Continue

8. Select Trusted and click Continue

9. Click Finish

Step 2: Manage Inbox Connections

Inbox appears in settings showing:

• Email address

• Connection status (Active, Failed)

• Apps linked

• Actions: Reconnect | Delete

Warning: Deleting an inbox will remove all linked auto provisioning configurations, reverting the affected apps to manual provisioning.

Step 3: Configure Apps That Require Email Verification

• Go to App Governance → Select app → Provisioning → Agent Cake.

• App setup shows a connected inbox already preselected (email + status).

• Option to add an alias email address below used for third-party app account (e.g. [email protected])

• Saved configuration displays the connected inbox in summary view.

---

🔒 Security & Privacy

• Cakewalk only ever reads emails from the specific inbox you connect. No other mailboxes are accessed.

• Only verification-related emails are processed. Regular messages, personal content and other inbox data are never read or stored.

• All data is encrypted in transit and at rest, following industry standards.

---

🛠️ Monitoring & Troubleshooting

• Badges: Inboxes show Active or Failed if the connection is no longer valid.

• Reconnect reminders: When a connection fails, admins are notified via Email and Slack with a direct prompt to reconnect.

• Error handling: Inline error messages in the inbox configuration guide you to reauthenticate or switch providers.

---

📘 Best Practices

• Use a dedicated service account instead of a personal inbox to keep data fully separate.

• Dedicated service accounts are also recommended to maintain auto provisioning workflows, ensuring continuity even if Admins or App Owners leave.

• Reconnect failed inboxes promptly to avoid provisioning delays.