Firebase email template for Scope to a tenant

Question

I modified the email template for "reset password". If the user is out of tenant scope on Identity Planform - the template works fine. But when the user is in tenant scope - the template not working.

User out of scope:

IDP: https://i.stack.imgur.com/CNO8S.png

Email: https://i.stack.imgur.com/7B4ra.png

User in scope of tenant:

IDP: https://i.stack.imgur.com/Q42EP.png

Email: https://i.stack.imgur.com/6dB6o.png

export const resetPassword = (email) => async (dispatch) => {
  try {
    const userSnapshot = await firebase.db.collection(USER_DATA_COLLECTION).where('email', '==', email).get();
    firebase.auth.tenantId = userSnapshot.docs[0].data().tenantId;
    return await firebase.doResetPassword(email);
  } catch (e) {
    console.log(e);
  }
};

please see my suggestion below and lmk if it works! – chronologos Aug 20 '21 at 23:14 — chronologos, Aug 20 '21 at 23:14

Thomas Burke · Answer 1 · 2022-01-31T19:17:54.830

Currently, Google Cloud Identity Platform (GCIP) and Firebase Auth do not support tenant specific email templates.

You can update tenant metadata to allow the tenant to inherit custom domains, email templates, and custom SMTP settings. If emailSendingConfig is set to true emails sent from tenant will follow the project level email sending configurations. If false (by default), emails will go with the default settings with no customizations (e.g. custom domain attached to email template will not be applied). You can set this field by executing the below cURL command:

curl -d "{'inheritance':{'emailSendingConfig': true}}"\
-H 'Authorization: Bearer AUTH_TOKEN' \
-X PATCH -H 'Content-Type:application/json' \
https://identitytoolkit.googleapis.com/v2/projects/PROJECT_ID/tenants/TENANT_ID?updateMask=inheritance.emailSendingConfig

Notes for the parameters passed to the above cURL command

The AUTH_TOKEN will need the scopes listed in the Identity Toolkit REST API documentation. One of the easier ways for you to retrieve the auth token for the REST command is to have a project owner use OAuthPlayground and authorize the Identity Toolkit API v3 scopes

TENANT_ID is the actual tenant id as opposed to the display name, this can be obtained via the GCIP > Tenant Cloud Console page.

score 0 · Answer 2 · edited Dec 05 '22 at 01:04

0

You can call the admin API to inherit emailSendingConfig. Emails sent from tenant will now follow the project-level email sending configuration.

edited Dec 05 '22 at 01:04

Community

1
1

answered Aug 12 '21 at 21:10

chronologos

338
3
13

The link you provided only works for Google employees, not all of us are. – Evgeny Nov 27 '22 at 11:05

Firebase email template for Scope to a tenant

2 Answers2

Notes for the parameters passed to the above cURL command

Linked