<!-- This template is a great use for issues that are feature::additions or technical tasks for larger issues.--> ### Proposal Allow an admin to turn on automatic removal of unconfirmed/unverified users after a specified number of days. ### Rationale Especially on GitLab.com, we have a lot of accounts with non-existent emails (typos, misconfigured SCIM/SAML) which are never verified/confirmed. As a result, we get a lot of Support requests. See #29279 for a long list. ### Implementation * Allow some way to turn it on/off (`gitlab.rb`, admin UI, or API). Preferably Admin/API. * Need to choose default, suggest 7 days. * Number of days should be configurable. * consider throwing an error if < 3 days when soft confirmation is on. * Add wording that it will auto delete if not confirmed within the set number of days (ideally, all of) the following: * post-registration "Almost there..." page * confirmation email * Documentation * Some technical details in https://gitlab.com/gitlab-org/gitlab/-/issues/352514#note_1054143903 ## Workaround - For Self-managed, admins can delete the accounts through any number of methods. - For SaaS, GitLab Support will delete the account manually if it's the cause of another issue.