Org2Org Password Sync Error "Api Validation Failed: Password (Password: Password)"
Jun 13, 2024
Okta Classic Engine
Okta Identity Engine
Okta Integration Network
Overview
Org2Org password sync flow fails when syncing a new password after a password reset on the spoke tenant. The error is visible in the syslog of the hub tenant:
EventType application.provision.user.password
Reason Api validation failed: password (password: Password)
Result FAILURE
LegacyEventType app.api.error.push_password_update
Applies To
- Org2Org
- Password Sync
- Password Reset
Solution
If JIT is enabled on the hub tenant for the Org2Org integration, users updated via JIT by design cannot have their passwords updated. The affected user must be disconnected from the SAML IDP master, and the password reset must be done one more time.
