Answers.Body: <p>This is not default. It's a custom drupal module or a custom CiviCRM extension, depending on the exact use case. Should not be that difficult.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-02-01T23:07:40.387Z
Answers.Text: Thank you. I just found a relevant question at the Drupal Stack Exchange: [Would Drupal send to an alternative email address for reset password?](https://drupal.stackexchange.com/questions/170109/would-drupal-send-to-an-alternative-email-address-for-reset-password). The answer there says I need to implement hook_mail_alter(), where I could add additional emails. I might try and make a module to do this.
Answers.UserDisplayName: bendodge
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-01-29T06:46:52.777Z
Answers.LastActivityDate: 2016-01-29T06:46:52.777Z
Answers.UserDisplayName: Catorghans
Body: <p><strong>Can Drupal send password reset tokens to email addresses other than the Primary in the linked CiviCRM contact?</strong></p>
  
  <p>If this question veers too far away from CiviCRM, I apologize. This ability might permit resetting passwords for all users in our Active Directory Federated Services/Office 365 environment - a huge benefit!</p>
  
  <p>We are migrating away from a CRM we can't afford. We had a custom web application resetting AD passwords by searching the old CRM's email database and generating a link for the associated user, who could have any number of emails associated. The big problem is that the <strong>Primary email is likely issued by us</strong> via Office 365 and thus uses the same AD FS credentials that we would like to sync Drupal to. (We have achieved SSO everywhere else and don't want Drupal/CiviCRM to be separate.) Therefore, someone needing a password reset probably can't access his/her Primary email, either.</p>
  
  <p>As the trend is lately, we allow students access to .edu emails after graduation, so we have quite a few random people out there forgetting passwords. A very desirable side effect of using CiviCRM for password resets is that alumni will probably care a lot more about keeping their own contact information up-to-date with us (since access to their .edu email depends on it).</p>
  
  <p>If I can send password reset tokens to any one of a contact's emails, a lot of problems are suddenly solved.</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-01-28T20:50:28.190Z
Comments.Text: Am not familiar with ADFS, but do you need a drupal reset link or an ADFS reset link?
Comments.UserDisplayName: Catorghans
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-01-28T23:17:54.427Z
Comments.Text: ADFS doesn't have rest links per se. It's just a link between Azure's servers and a local domain controller.
Comments.UserDisplayName: bendodge
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-01-28T23:24:19.030Z
Comments.Text: According to discussions I've read online, Drupal LDAP can write back changes to AD if desired (the default is read-only). That would allow Drupal to change AD passwords.
  
  The previous comment was submitted accidentally - didn't use Shift+Enter.
Comments.UserDisplayName: bendodge
Tags: <drupal><authentication><sso>
Title: Can Drupal send password reset tokens to non-default emails for accounts?
ThreadText: # Can Drupal send password reset tokens to non-default emails for accounts?
  
  (Asked by: username_0 on 2016-01-28)
  
  **Can Drupal send password reset tokens to email addresses other than the Primary in the linked CiviCRM contact?**
  
  If this question veers too far away from CiviCRM, I apologize. This ability might permit resetting passwords for all users in our Active Directory Federated Services/Office 365 environment - a huge benefit!
  
  We are migrating away from a CRM we can't afford. We had a custom web application resetting AD passwords by searching the old CRM's email database and generating a link for the associated user, who could have any number of emails associated. The big problem is that the **Primary email is likely issued by us** via Office 365 and thus uses the same AD FS credentials that we would like to sync Drupal to. (We have achieved SSO everywhere else and don't want Drupal/CiviCRM to be separate.) Therefore, someone needing a password reset probably can't access his/her Primary email, either.
  
  As the trend is lately, we allow students access to .edu emails after graduation, so we have quite a few random people out there forgetting passwords. A very desirable side effect of using CiviCRM for password resets is that alumni will probably care a lot more about keeping their own contact information up-to-date with us (since access to their .edu email depends on it).
  
  If I can send password reset tokens to any one of a contact's emails, a lot of problems are suddenly solved.
  
  **Tags:** drupal, authentication, sso
  
  > **Comments:**
  > **username_1**: Am not familiar with ADFS, but do you need a drupal reset link or an ADFS reset link?  
  > **username_0**: ADFS doesn't have rest links per se. It's just a link between Azure's servers and a local domain controller.  
  > **username_0**: According to discussions I've read online, Drupal LDAP can write back changes to AD if desired (the default is read-only). That would allow Drupal to change AD passwords.  The previous comment was submitted accidentally - didn't use Shift+Enter.  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2016-01-29. Score: 1
  
  This is not default. It's a custom drupal module or a custom CiviCRM extension, depending on the exact use case. Should not be that difficult.
  
  > **Comments:**
  > **username_0**: Thank you. I just found a relevant question at the Drupal Stack Exchange: [Would Drupal send to an alternative email address for reset password?](https://drupal.stackexchange.com/questions/170109/would-drupal-send-to-an-alternative-email-address-for-reset-password). The answer there says I need to implement hook_mail_alter(), where I could add additional emails. I might try and make a module to do this.  
  
  ---
  
  