Force Email to be Confirmed with Identity

DevMicrosoftSecurityTech

Microsoft Identity is an extremely flexible solution for authentication in modern web applications. The default table structure created with Identity contains properties for EmailConfirmed and PhoneConfirmed. Out of the box, these fields simply indicate whether or not the related fields have been confirmed.

In some circumstances, you may want to force the email address to be confirmed before allowing sign-in. If so, you will want to update the ApplicationSignInManager accordingly. The code snippet below demonstrates this:

Jan 28 2016 9:48 PM