Hello, I have question. We have a situation where users receive Magic link with link inside email or email when users need to reset password. Inside the email there is one time link which user should click. There are some situations where the link inside the email is been wrapped by some email anti spam or some other security application like Microsoft defender and when user clicks on the link it does not work. What is the solution for such cases?

Email Scanner Protection Solution Descope provides built-in email scanner protection specifically for this issue. Email security services like Microsoft Defender and anti-spam tools often click magic links to scan for threats, which can invalidate the one-time tokens before real users access them. Use Built-in Flow Actions Replace your current magic link flows with Descope's email scanner protection actions : • Sign In / Magic Link / Email with Email Scanner Protection • Sign Up / Magic Link / Email with Email Scanner Protection • Sign Up or In / Magic Link / Email with Email Scanner Protection • Update user / Magic Link / Email with Email Scanner Protection These actions automatically detect email scanners and show an intermediate screen with a button that scanners typically won't interact with, while allowing genuine users to proceed directly . How It Works When an email scanner clicks the magic link, the system detects it's not a real user and presents a screen requiring manual interaction. This prevents token invalidation since scanners don't typically click buttons on web pages . Real users see the button and can proceed normally to complete authentication. The protection works automatically once you replace your existing magic link actions with the scanner-protected versions - no additional configuration needed . Checking for Email Scanners | Descope Documentation Checking for Email Scanners | Descope Documentation