Closing -- see SOCIALACCOUNT_EMAIL_AUTHENTICATION.

[simkimsia]

          Closing -- see SOCIALACCOUNT_EMAIL_AUTHENTICATION.

Originally posted by @pennersr in #215 (comment)

I have done search in the code for this and for SOCIALACCOUNT_EMAIL_AUTHENTICATION_AUTO_CONNECT.

I think it doesn't work for microsoft graph provider and I am not sure how to check where it went wrong.

I have to write my own adapter, which I prefer not to. I modified an adapter I found from 2014 to make it work. https://stackoverflow.com/a/78254683/80353

[simkimsia]

I have found out why.

1. To find out how SOCIALACCOUNT_EMAIL_AUTHENTICATION is used, I need to search using EMAIL_AUTHENTICATION and not include the prefix.

2. at

   django-allauth/allauth/socialaccount/models.py

   Line 337 in d29fd17

   emails = [e.email for e in self.email_addresses if e.verified]

   , the assumption is that the SocialLogin needs the oauth provider to return verified email addresses. So in my case, the Microsoft Graph for the tenant returned email addresses that are unverified. So it didn't proceed.

I recommend updating the document to make this clear. How do I do that?

[pennersr]

If you are absolutely sure that the email addresses are verified, you can turn that on. This is documented here:

The ``SOCIALACCOUNT_PROVIDERS`` setting is used to configure providers and their
apps. Next to the secrets that are configured per app, there are also parameters
such as ``VERIFIED_EMAIL`` that hold for all apps. The following is an example
configuration::

    SOCIALACCOUNT_PROVIDERS = {
        "github": {
            # For each provider, you can choose whether or not the
            # email address(es) retrieved from the provider are to be
            # interpreted as verified.
            "VERIFIED_EMAIL": True
        },

This lacks indeed a clear link/relationship with SOCIALACCOUNT_EMAIL_AUTHENTICATION -- a PR to improve the documentation is welcome.

[simkimsia]

@pennersr

"VERIFIED_EMAIL": True

This cannot be done in database config right?

I'm doing this for microsoft graph provider

[pennersr]

You can also configure it per app via the app settings. To do so, add {"verified_email": true} to the app settings (also works when editting the SocialApp via the Django admin).

[pennersr]

Closing -- if anybody wants to improve the documentation, feel free to file a PR.