Hi Patricia,

Are you creating a User without Credentials or with Credentials ? Have you tried to click on link obtained other than email, probably using Postman to activate user? is it working ? how long it take to receive activation link via custom email and clicking on link? make sure the timeout as below.

By default, the activation email is valid for one day. This can be edited by performing the followings steps:

• in the Okta Admin Console, navigate to Security > General
• in the Organization field, click Edit
• choose the desired time in the Activation emails are valid for drop down box. The choices are:
  • 8 hours
  • 1 day
  • 7 days
  • 30 days
  • 90 days
  • 180 days

Have you check ${org.activationTokenExpirationHours} value what is going ?

Also check - default value for "Activation emails are valid for"

By default, the activation email is valid for one day. This can be edited by performing the followings steps:

• in the Okta Admin Console, navigate to Security > General
• in the Organization field, click Edit
• choose the desired time in the Activation emails are valid for drop down box. The choices are:
  • 8 hours
  • 1 day
  • 7 days
  • 30 days
  • 90 days
  • 180 days

Hello, thanks for your answers.

A little more informations about your remarks :

• in my settings, the emails are valid for 30 days
• I call the API to create a user without credentials and without sending mail. Then The user is created with status STAGED. It's OK.
• when my application generates our welcome applicative email, I want to add in its content the activationLink provided by the Okta API.
• I've tested the actionLink provided by the API by pasting it directly in a navigator : it works fine. When I click the link (not the same, that is already used) which is embedded in our email, it fails with token expiration error.
• I've tested in Postman and it works fine too