When you create a user with a password, the account is activated immediately (it also behaves this way when you create an account in the console). There's even a warning on the developer site about not generating another activation token after creating a user with a password.

In my opinion, you should use the Create User without Credentials method (https://developer.okta.com/docs/reference/api/users/#create-user-without-credentials), and then send an activation email to the user. That will prompt the user to click a link to activate their account, then Okta will guide them through setting their own password and whatever account recovery options you have enabled. This also eliminates the need for you to track and transmit any passwords, so the process is more secure.

I hope that helps!

Hi Mike,

I tried the solution you provided and it works as expected. I am working with React Native App using Rest API to:

• Register a user without password as you mentioned.
• Activating the user using lifecycle endpoint along with sending the email.

But when the user clicks the email he/she is navigated to Okta hosted screen when they have to enter and confirm password. I was wondering if I could achieve that inside my react native app.

Expected Behaviour:

• User clicks the link in the email
• Should be navigated to React Application hosted screen to set password
• New information is send via Rest API to okta to update the password and user should be logged in.

Please do let me know if I am on the right track and the expected behaviour is possible.

Thanks.

Daman