A system administrator wants to help a user gain control of their Salesforce log in by changing their email address. Examples of this situation include:
Some users may report that they are not able to complete the email address change request because they are redirected to a Salesforce login page; the user gets stuck in a loop between not knowing their password and not being able to change their email address.
This issue is caused by the security setting "Require identity verification for email address changes," which is enabled by default in newer Salesforce orgs. When this setting is active, users must verify their identity to change their email address — but if they have no access to their old email address, they get stuck in a login loop. Below are three options a system administrator can use to resolve this situation.
See also: Modify Session Security Settings
Temporarily disable the "Require identity verification for email address changes" setting until the user has successfully changed their email address.
Before making an email address change, verify whether the user is currently frozen. A frozen user account can cause the login loop issue.
This option works best for users who have never logged in to the original user record.
Add a Single User
Considerations for Deactivating a User
Deactivating Users
Verify Email Addresses to Send Through Salesforce
000383887

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.