This article clarifies whether the Users API is able to save null or blank passwords. An administrator is attempting to update a user's password using one of the following methods, which results in the user's password being set to a blank or null value:
PUT api/v1/users/<USER_ID>
POST api/v1/users/<USER_ID>
- Users API
- Adding a blank or null password
- Okta Identity Engine (OIE)
- Okta Classic Engine
The ability to save blank or null passwords to users via an API call is allowed because the PREVENT_SETTING_BLANK_PASSWORD_ON_USER_UPDATE feature is disabled. When this feature is disabled, the administrator is able to save blank or null passwords to users via an API call.
Contact Support to enable the feature PREVENT_SETTING_BLANK_PASSWORD_ON_USER_UPDATE.
After the feature is enabled, the result prevents the saving of blank or null passwords.
