Adding Creds to new User created without Creds, via API
The app i'm working on creates a user without credentials and then when the user clicks on a link (via email) they specify a password and recovery question. All of this is done via the Java API.
The issue is that after setting the password, recovery question and setting the user to ACTIVE the user is still prompted for the recover answer and image after their first login (even though the user is ACTIVE).
The calls i'm making, via the Java API are (and i've tested this over REST as well and the result is the same):
Currently, we do not have a specific command to input the Security Image setup, and as a general rule, the users will be prompted to set their security image until they actually do that.
While this is expected behaviour, what I would recommend is to suggest this on the Okta Community by using the "Suggest a feature" option at the bottom right hand side of your Okta admin dashboard, or by logging in to your Okta Admin Panel -> Help and Training -> Community -> Ideas -> Submit an Idea.