Skip to content

Configure Email Masking Pattern for Notification Based Password Recovery

This page guides you through configuring the email masking regex pattern to mask the user's email address returned in the HTTP response body when initiating the password recovery API where notification-based password recovery is enabled.

Enable email masking

Follow the instructions below to make the email masking regex pattern configurable.

  1. Log in to the management console using admin/admin credentials.

  2. Navigate to Main > Identity > Claims > List**.

  3. Click "".

  4. Under Email, click Edit.

  5. Click Add Claim Property.

  6. Enter MaskingRegEx as the Property Name and enter a suitable masking regex pattern as the Property Value. Ensure that the regex pattern is XML encoded.

Map claims

Alternatively, you can also add a claim mapping using the configuration file instead of via the management console to configure it server-wide. Follow the steps below to do this.


Note that claims configured in <IS_HOME>/repository/conf/claim-config.xml file get applied only when you start the product for the first time, or for any newly created tenants.

  1. Open the claim-config.xml file found in the <IS_HOME>/repository/conf/ folder.

  2. Add the MaskingRegEx property for claim URI under the claim dialect. A sample is given below.

    <Description>Email Address</Description>
    <Required />
    <SupportedByDefault />


    Ensure that the regex pattern is XML encoded.

  3. Save the file and restart the server.