OKTA /authn/credentials/change_password API is throwing invalid provided error -


in okta admin screen, expired password associated username.

tried primary authentication (/authn) described in http://developer.okta.com/docs/api/resources/authn.html. got proper status password_expired , state token.

invoked change password api (ie /authn/credentials/change_password) above state token , old/new passwords. instead of getting success message, getting error message "e0000011: invalid token provided".

my developer api token , state tokens correct. not sure why getting error. can please help?

thanks

nara

after expire password in the ui, user of expired password no longer in active state. specifically, they're set password_expired state not allow password resets. security feature intent of explicitly setting user in state limit constrain access system.

note user event model documented in okta developer guide @ http://developer.okta.com/docs/api/resources/users.html#user-status

before can change user password, need re-activate user.

curl -x post    \     -h "content-type: application/json"     \     -h "accept: application/json"   \     -h "authorization: ssws {{apikey}}"     \     -h "cache-control: no-cache"    \     -d '' https://{{url}}/api/v1/users/00u36pr8k9dmraqbvmwz/lifecycle/activate?sendemail=false 

Comments

Popular posts from this blog

Java 3D LWJGL collision -

spring - SubProtocolWebSocketHandler - No handlers -

methods - python can't use function in submodule -