Preference Manager: Magic Link Authentication

Concep x InterAction v3.17 marks the launch of Magic Link authentication for Preference Manager. Magic Link is a key security enhancement, replacing the current authentication mechanism on non-password Preference Manager sites. This ensures that PII is only accessible to the person it relates to. 

How Magic Link Works:

1. Contact submits email address via the Preference Manager login page.
2. Contact is sent a secure login link to verify they have access to that inbox.
3. Contact clicks the link in their inbox.
4. Preference management form loads in browser, populating contact information from CRM.

Here's a GIF of Magic Link in action:

FAQs:

Q: What is changing?
A: Preference Manager sites that previously didn't require a password will now use Magic Link authentication. This means that when someone attempts to log in, they will need to verify their identity through a link sent to their email. Once verified, they can access the site and manage their preferences.

Q: Why are we making these changes?
A: To safeguard client data by ensuring that only authorized individuals can access their personally identifiable information (PII).

Q: Who is impacted?
A: This change will affect all sites that currently do not require a password for login. If you are using one of these sites, you will transition to the Magic Link login process.

For sites where a password is already required, there will be no change to your existing login process. Contacts will be able to continue to use their password as usual.

Q: What do I need to do to get Magic Link set up?
A: Nothing. We will be rolling this change out to all sites over the coming weeks. However, if you would like to customize the Magic Link email, then please reach out to our Services team.

Q: What if my site already requires users to enter a password? 
A: Your site will not be impacted. However, if you'd like to replace your password authentication with magic link authentication, please chat to our Services team.

Q: Does auto-login still work?
A: Users will no longer be automatically logged in if they access the Preference Manager via an email campaign. Now, the email address populates on the login page and the user will need to verify that they have access to the inbox. This prevents forwarded recipients from accessing PII.

Q: Will contacts have to sign up again?
A: No. From now on, they'll simply have to verify they have access to the inbox that they are trying to log in with.

Q: Can I customize the message that pops up when a contact tries to log in?
A: Yes - our Services team can help with that.