OKTA /authn/credentials/change_password API is throwing invalid provided error -
in okta admin screen, expired password associated username.
tried primary authentication (/authn) described in http://developer.okta.com/docs/api/resources/authn.html. got proper status password_expired , state token.
invoked change password api (ie /authn/credentials/change_password) above state token , old/new passwords. instead of getting success message, getting error message "e0000011: invalid token provided".
my developer api token , state tokens correct. not sure why getting error. can please help?
thanks
nara
after expire password in the ui, user of expired password no longer in active state. specifically, they're set password_expired state not allow password resets. security feature intent of explicitly setting user in state limit constrain access system.
note user event model documented in okta developer guide @ http://developer.okta.com/docs/api/resources/users.html#user-status
before can change user password, need re-activate user.
curl -x post \ -h "content-type: application/json" \ -h "accept: application/json" \ -h "authorization: ssws {{apikey}}" \ -h "cache-control: no-cache" \ -d '' https://{{url}}/api/v1/users/00u36pr8k9dmraqbvmwz/lifecycle/activate?sendemail=false
Comments
Post a Comment