Skip to main content
The Auto-Login Authentication method provides a token-based authentication link in the quarantine notification email. This token allows end-users to access their quarantined emails in the Self-Service Quarantine for a specified number of days.

​
Permission

The Auto-Login Authentication method grants only the permissions associated with the xcc_quarantine_user role. It cannot retrieve or apply permissions from other user roles. For more details about the permissions associated with the xcc_quarantine_user role, refer to the Users, Roles, and Permissions documentation page.

​
Set-up Guide

  1. Log in to the xorlab Security Platform with an admin account.
  2. Click the Admin icon in the right menu.
  3. In the Admin Panel, click Expert Editor.
  4. Navigate to /shared/guarded_tenants.yml
  5. Add the following configuration:
  • Include the autoLoginLink block for each tenant.
  • Set enabled to true to include an auto-login link in all quarantine notification emails.
  • Set enabled to false to disable the feature.
  • expirationDays defines the validity period of the authentication link.
  • The default of expirationDays is 7 days.
  • To make links permanent, set expirationDays to -1.
Example configuration:
Expert Editor: /shared/guarded_tenants.yml

​
Shared Mailboxes

Quarantine notification emails are sent to all users with access to a shared mailbox. Anyone who receives the notification email can use the auto-login link to access the Self-Service Quarantine.

​
Compatibility with Authentication Methods

The Auto-Login Authentication method is compatible with other authentication methods, including SAML, LDAP, and password-based authentication. This allows organizations to provide seamless access to quarantined emails for end-users while preserving existing authentication mechanisms for roles with elevated permissions. No configuration changes are needed in /auth/auth/auth.yml to enable this feature. When enabled, the auto-login token is included in all quarantine notification emails. It is not possible to restrict the Auto-Login Authentication method to specific user groups—once activated, all users receiving quarantine notifications will have access through the auto-login link.

​
Access for Elevated Roles

When users with elevated roles—such as analysts or administrators—receive a quarantine notification for their own quarantined emails, they can use the auto-login link to access their Self-Service Quarantine. However, this authentication method does not grant access to the Analyst Dashboard, Admin settings, or other privileged areas of the platform. To access these administrative features, users with elevated roles must first sign out and re-authenticate using their primary authentication method, such as SAML or LDAP. This ensures that privileged actions remain protected under stricter authentication controls, maintaining security while still allowing convenient access to quarantined emails.

​
Multi-Tenancy Usage

The Auto-Login Authentication method is compatible with multi-tenancy environments and can be enabled separately for each tenant.
  1. Log in to the xorlab Security Platform with an admin account.
  2. Click the Admin icon in the right menu.
  3. In the Admin Panel, click Expert Editor.
  4. Navigate to /shared/guarded_tenants.yml
  5. Add the following configuration to each tenant:
  • Include the autoLoginLink block for each tenant.
  • Set enabled to true to include an auto-login link in all quarantine notification emails.
  • Set enabled to false to disable the feature.
  • expirationDays defines the validity period of the authentication link.
  • The default of expirationDays is 7 days.
  • To make links permanent, set expirationDays to -1.
Example configuration:
Expert Editor: /shared/guarded_tenants.yml