Get forgot password link through API

  • 1
  • Question
  • Updated 1 week ago
Hello,
Is there are way to create forgot password link for a client user, but instead of sending it to client, get it as a result from API?

Thanks
Photo of Aleksandras Artemjevas

Aleksandras Artemjevas

  • 25 Posts
  • 3 Reply Likes

Posted 2 weeks ago

  • 1
Photo of Dale Smith

Dale Smith, Employee

  • 128 Posts
  • 19 Reply Likes
Hi Aleksandras,

I'm afraid there isn't. For security concerns, all Forgot Password links must be sent to the confirmed email address of the user.

Thanks,
Dale
Photo of Aleksandras Artemjevas

Aleksandras Artemjevas

  • 25 Posts
  • 3 Reply Likes
I see. With this feature we would be able to close one security risk.
For example:
Employee user creates client account for company A users. 
When user leaves company A, we do not know that and we do not remove his user from ShareFile.
So now this user who does not belong to company A has unauthorised access and there is no way to know that. 

To solve this we could do something like this:
When user leaves company A, he does not have access to his company email. Instead of password expiration we send password reset link. So in this case user can't access ShareFile without access to his company email.