How can I turn off “Enroll your authenticator” emails?

The “Enroll your authenticator” email is an automatic email message with a link to enroll your authenticator, such as your mobile phone with Rublon Authenticator or a third-party app.

When Is the “Enroll your authenticator” Email Sent?

Rublon sends the “Enroll your authenticator” email together with the Email Link email message in the following two scenarios:

Scenario 1:

• User logs in to an integration that does not support the Rublon Prompt

• User has not enrolled their mobile device

• The Default Authentication Method policy is set to Mobile Push (or any other mobile-based authentication method)

Scenario 2:

• User logs in to an integration that does not support the Rublon Prompt

• User has not enrolled their mobile device

• The Default Authentication Method policy is not set to any method

• The only selected method in the Authentication Methods section is Mobile Push (or any other mobile-based authentication method)

Note: The “Enroll your authenticator” email is not sent if a sequence of more than one method is set in the Rublon Authentication Proxy configuration file (or Rublon MFA for RD Gateway’s Windows Registry settings). For example, if “push,email” is set as the sequence of methods and neither of these methods is set as default in a Rublon Policy, Rublon will detect that sending a Mobile Push notification is impossible and will challenge the user with the Email Link method instead. This is a fallback mechanism that does not trigger the “Enroll your authenticator” email.

Why Is the “Enroll your authenticator” Email Sent?

The “Enroll your authenticator” email may be helpful if an administrator has enabled the Default Authentication Method policy for an integrated application and that particular integration does not support the Rublon Prompt. In that case, the user has no way to access the Manage Authenticators view to enroll their mobile device.

If “Enroll your authenticator” is turned on, the user can enroll their mobile device by clicking the link inside the email message. Otherwise, the user cannot enroll their mobile device without the administrator’s help.

How to Turn Off “Enroll your authenticator” Emails?

While it is a good idea to use the Rublon Authenticator for stronger security, you may prefer to only allow your users to use the Email Link authentication method.

If you do not want your users to have the option to enroll their mobile devices if they want, you can ask us to turn off “Enroll your authenticator” emails altogether by making an inquiry to Rublon Support.

Helpful Links

Rublon Admin Console - Documentation

Rublon Support - Contact Us To Turn Off Enroll your authenticator Emails