“Stop” keyword doesn’t suppress and appears in Inbox notifications

Most awkward bug I have recently faced

What problem are you observing?

A notification template disabled with the documented Stop subject keyword still generates an Identity Security Cloud Inbox (in-app) notification. That notification shows the template subject with the keyword included, for example “STOP ATTENTION: Your [product] password update was successful”, to the end user.

The Inbox content appears to be rendered from the EMAIL template, but:

  • the documented suppression does not apply to the Inbox; and
  • the Inbox content cannot be customised separately.

What is the correct behavior?

Either:

  1. A template disabled with Stop/no_send also suppresses the Inbox notification for that key; or
  2. If the keyword is intended for email only, the Inbox notification does not show the raw subject keyword. The documentation should then state that Inbox delivery is controlled separately (for example through notification preferences), and the inboxTemplate/slackTemplate/teamsTemplate fields should be documented in TemplateDto or removed from the response.

What product feature is this related to?

Identity Security Cloud Notifications:

What are the steps to reproduce the issue?

  1. In Admin > Global > Email Templates, open “Password Changed” (cloud_user_password_changed) and make STOP the first word of the subject, as documented.
  2. Change an identity’s password through Identity Security Cloud.
  3. Sign in as that identity and open Notifications. An INFORMATIONAL entry appears with the subject “STOP ATTENTION: Your … password update was successful”.