In Okta Access Gateway (OAG) version 2025.3.1, worker nodes incorrectly prompt administrators to change the Admin UI password after a High Availability (HA) setup or when syncing from the admin node. A known issue causes this unexpected behavior. Upgrading to version 2025.5 or later resolves the issue, while updating the password in the local authentication module serves as a workaround for the impacted version.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Access Gateway (OAG)

A known issue in OAG version 2025.3.1 causes the worker nodes to prompt for a password change after an HA setup or admin sync.

How is the Admin UI password reset prompt resolved permanently?

Upgrade Okta Access Gateway to version 2025.5 or later to permanently resolve this issue.

Apply the workaround for Okta Access Gateway version 2025.3.1.

For environments running the impacted version, apply the workaround by navigating to the Admin UI settings, editing the local authentication module, and updating the password.

1. Navigate to the Admin UI.
2. Select Settings.
3. Edit the local authentication module and update the password by following the instructions in the Access Gateway Local Auth Module documentation.

Related References

• Access Gateway Local Auth Module