Control: 1.13 Ensure all OCI IAM user accounts have a valid and current email address

Description

All OCI IAM local user accounts have an email address field associated with the account. It is recommended to specify an email address that is valid and current.

If you have an email address in your user profile, you can use the Forgot Password link on the sign on page to have a temporary password sent to you.

Having a valid and current email address associated with an OCI IAM local user account allows you to tie the account to identity in your organization. It also allows that user to reset their password if it is forgotten or lost.

Remediation

OCI IAM without Identity Domains

From Console

1. Login to OCI Console.
2. Select Identity from Services menu.
3. Select Users from Identity menu.
4. Click on each non-complaint user.
5. Click on Edit User.
6. Enter a valid and current email address in the EMAIL text box.
7. Click Save Changes.

From CLI

1. Execute the following for each non-compliant user:

oci iam user update --user-id <user-ocid> --email '<email address>'

OCI IAM with Identity Domains

From Console

1. Login to OCI Console.
2. Select Identity & Security from the Services menu.
3. Select Domains from the Identity menu.
4. For each domain listed, click on the name and select Users.
5. Click on each non-complaint user.
6. Click on Edit User.
7. Enter a valid and current email address in the Email and Recovery Email text boxes.
8. Click Save Changes.