Email verification requirements for Forge Authentication API application users

Email account verification for new and existing users on the Forge authentication service endpoints will be enforced effective March 30, 2020. At this stage, all new users will be prompted to verify their email addresses on sign up, and existing users who have not yet verified their accounts will be prompted to do so on login.

Why is this happening?

As part of improving both user security and customer support, as well as aligning with other Autodesk service access requirements, we have taken the step of requiring users to verify their email. This has the benefits of:

• Improving access support, ensuring that users won't be accidentally locked out of their accounts
• Aligning with downstream Autodesk service access, and
• Ensuring that user details cannot be "hijacked" by third parties

What does this mean for Forge developers?

As a Forge developer, this may affect you in two ways: 

• If you have not already done so, you will have to verify your email address before you can log in to forge.autodesk.com to manage your Forge account
• If your application uses Autodesk 3-legged authentication, users with unverified email addresses will have to complete the verification process before they can sign in to your application

The best way to ensure minimal disruption to your Autodesk accounts is to make sure you and all users who want to sign in to your application have completed the email verification process.

What does this mean for customers?

When a customer signs up for a new Autodesk account, the following happens:

1. User is prompted to verify their email address
2. An email is sent to the sign-up email address used, and the user can finish creating their profile
3. Within 14 days, the user will be able to access the verification email and follow the link to verify their account*

*After 14 days, if the email is still unverified, users must resend the verification email and restart the process.

While the account remains unverified, users will be prompted to verify their email to gain access to any authentication service endpoint and cloud services (such as Fusion). Verification is a requirement for access.

Users with existing Autodesk accounts will also find themselves prompted to verify their email addresses on login to their Forge-based applications. As with new users, they will be sent an email with a link to verify their account. Once a user clicks the link, their account is automatically updated and they can select "Continue" to gain access to the application.

For more details on the email verification process, please refer to the article on the Autodesk Knowledge Network. For any questions or concerns, please contact Support. For any Forge API issues, please reach out to Forge Help.