3189294 - External Candidate Accounts Created With Internal Company Email Domains - Recruiting Management

• Candidates are able to create External Candidate accounts using internal company domain, like "abc@companyname.com".
• Internal Users are able to create External Candidate accounts using their internal email address.

SAP SuccessFactors Recruiting Management

At the present moment, the system does not validate if the email being used while creating an External Candidate account has a valid domain or if the domain is an internal domain only.

Also, there's no way to prevent Internal Users from creating External Candidate accounts with their internal email addresses. Recruiting module does not integrate with EP/EC, when the account is being created, to validate if the email being used is present in any User Profile.

To make sure that no invalid domain is being used, you can use the One-Time Password functionality. This will request the candidate to access the email provided and confirm the account creation. For more information, please refer to the KBA - 2979350 - One-Time Password Email Verification (OTP) - Recruiting Management.

Regarding the fact that Internal Users are able to use their emails when creating an External Candidate account, this has not been addressed as an issue. Internal Users should be using their respective Internal Candidate Profiles to apply to any job. Also, as mentioned in the Cause section, Recruiting module does not validate if the email being used already belongs to any User Profile. This is an expected behavior based on the current code-design.

There is currently an enhancement request open for this on our Influence Portal and the next update on this is Q4 2024: [Application] - Blocking internal employee to create external profile by email domain validation.

 [Application] - Blocking internal employee to create external profile by email domain validation

user, internal, create, email, career, site, invalid, domain , KBA , LOD-SF-RCM , Recruiting Management , Problem