<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008C3jZ0SAJOkta Classic EngineAdministrationAnswered2026-04-08T09:00:23.000Z2017-05-19T17:45:55.000Z2020-04-13T23:46:21.000Z
End-User Password Reset
My users can't reset or update thier own passwords.  When they try, they receive an error that says: "You do not have permission to perform the requested action."

 

I have to reset the password in AD for them every time.  Where can I change this so that users can update their own passwords and unlock their own accounts?

  • Thank you for reaching out to Okta Support.

     

    In order to let AD mastered users to reset their own password, you have to go to your Admin Console -> Security -> Authentication -> Edit and check the "Users can change their Active Directory passwords in Okta" checkbox. More information about this can be found on our Support page, by accessing the following link: https://help.okta.com/en/prod/Content/Topics/Directory/Directory_People.htm#Resetting

     

    Thank you,

     

    Paul Auer

    Technical Support Engineer | Okta
    Expand Post
  • j5v7c (j5v7c)

    Hi,I don't see that option when I go to Admin Console -> Security -> Authentication -> Edit (see attached pic).  Am I using a different version of Okta that doesn't allow users to change their own passwords?

     

    0EM2A000000cClM
    Expand Post
  • JordanJ.26599 (Customer)

    Actually think my issue is due to my Okta AD service account not having the minimum permissions necessary to edit/write back to our Active Directory in order to change user passwords.

  • t6jta (t6jta)

    I realize this thread is rather old, but I stumbled upon it while trying to resolve the same error message. I didn't find an answer here that solved my problem, but I did figure it out. I found out that Okta's ThreatInsight service was blocking this user's access. I'm not sure if her IP (provided by the ISP) changed or what, but starting this morning she was no longer able to login. I checked, and it wasn't blacklisted anywhere else on the Internet. What I did to work around it was confirmed the end user's PUBLIC IP address (google "what's my ip" / you can also find it in the Okta logs) and added a new "network zone" with that IP. I then added the zone to the list of exemptions for ThreatInsight. I hope this helps someone.

    Expand Post
    • DougR.83759 (Customer)

      Thanks Dremio. I had the same issue today and it was related to threat insight. The only thing I would add was that when searching the Okta logs by username the Threat Insight issue wasn't evident. Getting the end user's home, public IP address was crucial in discovering the issue.

       

This question is closed.
Loading
End-User Password Reset