Account activation step

Suggest Edits

The account activation step is used to validate a customer's ownership of their email address and/or phone number identifier. Once verified, these identifiers can be used for account recovery processes such as username reminders or password resets.

Diagram showing the account activation step in the registration journey. The flow begins with Passkey promotion and continues to a decision point labeled “Account activation type.” From there, the in-band path leads to “OTP account activation via phone or email,” and the out-of-band path leads to “Magic link account activation via email.” Both paths proceed to the next step, “OIDC token or SAML2 response generation.” — The Account activation step within the registration journey

This step occurs at the end of the registration journey and ensures that customers can be reliably contacted and authenticated in the future.

Depending on the type of identifier, the customer sees different flows:

In-band email activation

Strivacity shows a “Verify your email address” screen and sends an activation message to the email address the customer enters.
The email contains a six-digit passcode.
The customer activates their account by entering the passcode on the screen.
Upon success, Strivacity confirms activation (both on-screen and via email) and proceeds to the next step in the journey.

Side-by-side display showing the email-based account activation process. On the left, a SaaSii-branded screen prompts the customer to enter a 6-digit passcode sent to a masked email address (n******z@saasii.io). The screen includes options to confirm the passcode, resend the email, or return to login. On the right, a sample activation email from noreply@saasii.io contains a passcode (927459), the customer’s username (natalie.estevez), and a link to the login page. An arrow between the two screens illustrates the connection between receiving the passcode and entering it in the UI. — Account activation through a passcode sent via email

In-band phone activation

Strivacity displays a “Verify your phone number” screen and sends an SMS to the phone number the customer enters.
The message contains a six-digit passcode.
The customer activates their account by entering the passcode on the screen.
When the code is accepted, Strivacity marks the account as activated and automatically advances the registration journey.

Sequence of screens showing the account activation process using a passcode. The first screen prompts the customer to enter a 6-digit code sent to their email. The second shows a text message with the passcode. The third screen displays the code being entered. The final screen shows a confirmation email indicating the account has been successfully activated. — Account activation through a passcode sent via SMS

Out-of-band email activation

When a customer tries to sign in before activating their new account, Strivacity shows a “Your account is not yet activated” screen and instructs them to check their email.
The customer receives an email containing a single-use magic link.
Clicking the magic link opens an activation confirmation page; the customer simply selects Activate.
Strivacity displays a success screen, and the customer can proceed to sign in.

A sequence of four screenshots illustrates the email magic link, out-of-band account activation flow. The first screen, shown when a customer tries to sign in with an unactivated account, warns that “Your account is not yet activated” and advises the customer to check their email address which is masked on the screen, or resend the message. The second image displays the activation email, which contains a prominent “Activate my account” link. After the customer clicks that link, the third screenshot appears: a Strivacity page prompting them to press an “Activate” button to finish setup. The final screen confirms success with a green check mark and the heading “Your account has been activated,” followed by a “Back to login” button. — Out-of-band account activation through a magic link via email

Settings that affect this step

Several configuration elements determine when and how this step appears:

Identity store: Must include email and/or phone identifiers.
Self-service policy: Must have account activation enabled, and specify the activation method—either magic link after registration or passcode during registration.
Notification policy: Controls the content of the activation messages sent by email or SMS. Brands can customize these templates to reflect their tone and required variables.
Branding policy: Affects the design and text of the activation screens.

What happens next

Once the identifier has been verified, the customer proceeds to the final step of registration, token generation, which completes the registration journey and logs them in.

Updated 12 days ago