How does the password reset via the Forgot Password link work where you have AD as the profile master?

RodneyP.95088 (Customer) asked a question.

Paul S. (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
Hello Rodney,

It should work exactly as as an Okta mastered user, however there are a few things that need to be done:
- Delegated Authentication needs to be enabled in AD setting
- The service account you are using for AD Agent needs to have the option to "Reset user passwords and force password change at next logon"
- In Security->Authentication->Password->Active Directory Policy you need to set a rule to allow user to change password, perform self-service password reset.
If you have further questions don't hesitate to open a case with Support.

Paul Stiniguta
Technical Support Engineer
Okta Global Customer Care
Expand Post
RodneyP.95088 (Customer)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
Thank you for the answer Paul. I do have a follow up question but do you guys prefer that we do that via Okta support or can I go ahead and continue asking here?
Expand Post
j5v7c (j5v7c)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:28 AM
Hello Rodney,

Thanks for posting your inquiry in Okta Community Portal.

If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer."

Thank you,

Dylann Fezeu
Okta Help Center Team
Expand Post