Missing Admin 2FA email notifications
This article provides troubleshooting when you aren’t receiving the email with the setup completion instructions after you have set up Two-Factor Authentication (2FA) in order to enhance Admin access security in Adobe Commerce on cloud infrastructure.
Description description
Environment
Adobe Commerce on cloud infrastructure, all versions
Issue/Symptoms
You have set up Two-Factor Authentication in order to enhance Admin access security, but aren’t receiving the email with the instructions on completing the setup.
Cause
If you have not configured the Sender email properly, or your domain has not been white-labeled in SendGrid, then the email would have ended up in the Spam folder.
Resolution resolution
Follow these steps to resolve the issue:
Step 1 - Check your Spam folder.
If the email didn’t appear in your Spam folder, run this Mysql query to verify the email addresses have been configured:
select * from core_config_data where path like '%trans_email%';
If it doesn’t return any results, it means that the Sender address has not been configured.
Since you don’t have access to the admin, you will have to insert the configuration into the database. Plug in the appropriate email address and run the MySQL statement:
insert into core_config_data (scope,scope_id,path,value) values ('default',0,'trans_email/ident_general/email', your-email@here.com)
If it returns a result, proceed to step 2.
If the email appeared in your Spam folder, click on the link in the email. If the link has since expired, try logging in again to repeat the process.
Once you have gained access, go to Stores > Configuration > General > Store Email Addresses and configure the email addresses.
Step 2 - If or once the email addresses have been properly configured, SSH into the environment and run this command:
php -r "mail(<your email address>,<subject>,<content>,'To: <sender email>');"
Check your Spam folder for the email.
If the email appeared in your Spam folder, your domain’s email authentication not be fully configured for outbound delivery via SendGrid.
If you are using the SendGrid service managed by Adobe, submit a support ticket requesting that your sending domain be authenticated (sometimes called white-labeled) with SendGrid.
This process involves adding DNS records (DKIM and SPF) to authorize SendGrid to send emails on behalf of your domain, which increases the likelihood that your emails will be delivered to the inbox instead of the Spam folder.
You are responsible for managing your domain authentication settings directly within your SendGrid account dashboard. Refer to How to Set Up Domain Authentication in SendGrid documentation for details.
Notes:
Some customers choose to use a separately provisioned SendGrid service for full control over email deliverability and compliance (e.g., HIPAA requirements). Ensure you are following the correct troubleshooting steps based on the type of SendGrid service (Adobe-managed vs. self-managed) you are using.