Google Identity - email templates cannot be changed

[Herdi]

We use GCP Identity Platform to manage multi-tenant authentication with email and password provider.

Google provides a way to configure email templates that are sent when user requests a password reset (in our case, this flow is triggered on the fronted by calling https://firebase.google.com/docs/reference/js/v8/firebase.auth.Auth#sendpasswordresetemail). This will trigger a email send to the user for which identity this method was called. This email, however, is problematic for us: it is sent from the *.firebaseapp.com domain (we want to use our own domain) and since it's been setup initially, it is now not possible to amend body of the email sent or change the "from" email used to send it.

This is how the configuration looks like in GCP console: Identity console

Anyone experienced the same issues or know what is the proper procedure to update email templates?

[Jason-Finhaven]

I'm encountering this now as well - did you find any way to overcome this issue?

[TimJohns]

I don't know about 'proper' procedure, per se, but I was able to overcome this with some Firebase console setup, some DNS configuration, and then ultimately a hand-crafted REST API call.

The Identity Platform docs cover the first two steps, although I personally found the process kind of subtle and nuanced/convoluted.

Then the big missing piece that really had me stumped for a while was that there doesn't seem to be a way in the Cloud Console to set the URL in the template itself -- BUT! the REST API has a 'callbackUri' that you can indeed set with curl or in the API Explorer. I updated mine, and now links in my password reset emails now go to my custom domain, and best I can tell, work as expected.

There's a bit more detail in my gratuitously self-answered post, but the gist is that you can PATCH

https://identitytoolkit.googleapis.com/v2/projects/[YOUR_PROJECT]/config?updateMask=notification.sendEmail.callbackUri&key=[YOUR_API_KEY]

with:

{"notification":{"sendEmail":{"callbackUri":"https://[YOUR_CUSTOM_DOMAIN]/__/auth/action"}}}