Who is this article for?

Administrators managing users in Ideagen Mazlan Home.

Admin Console access is required.

Ideagen Mazlan Home requires an email attribute on every user account. Some organizations don't have an email value for every user, for example, service accounts or staff without a corporate mailbox. 

This article explains how to handle users who don't have an email address, depending on the way they're set up.

Considerations

Before attempting any workarounds, confirm if the user actually needs access to Mazlan Home. Not all accounts in your organisation’s directory require setup here. Service accounts, shared roles, and staff without mailboxes often get included by default through provisioning rules without review.

If access isn’t needed, exclude these accounts from provisioning to keep your user list clean and avoid unnecessary placeholders.

If access is required, follow the steps in the next sections.

Single Sign-On (SSO) users

If a user authenticates through an SSO identity provider (IdP), email is only needed here to satisfy the account schema.

In this case, you can assign a placeholder email address, in this format:

{username}@placeholder.yourcompany.com

Use a domain you control to prevent sending emails to valid but unowned addresses. The address must be correctly formatted but need not be unique or reachable. Users won’t receive welcome emails unless you enable them.

Configuring the IdP

The exact screen varies by identity provider, but the method is the same: instead of mapping the email attribute directly from a possibly empty source field, use an expression or transformation to create the value from a reliable source like the username. If your IdP doesn't support expression mapping, set the placeholder email directly in the user record.

Note: A placeholder email meets Mazlan Home's schema requirement only. Other Ideagen apps may use email for sign-in or user matching. Users with placeholder emails might not sign in or be matched correctly. Consult your account manager before using this workaround.

Username/password users

If a user authenticates by signing in directly to Mazlan Home using a username and password (without an IdP), they must use a valid email address. This is required for:

• Welcome emails (if enabled)
• Self-service password resets
• Email-based MFA (if enabled)

Provide a real email, as placeholders won’t work. Without a valid inbox, you can't reset forgotten passwords, even if welcome emails and multi-factor authentication (MFA) are disabled.

If an administrator manages the accounts, their working email can be used. It need not be unique, just accessible for password resets.

Important

Using the administrator's email instead of the user's is less secure, as the admin must manually share passwords with the user instead of the user managing them directly.

Note

A placeholder email meets Mazlan Home's schema but may cause sign-in or matching issues in other Ideagen apps that use email as an identifier. Consult your Account Manager before using this workaround.