
AkashM.93135 (Western Union) asked a question.
Reset password + Factors API
We have a requirement that user can verify any one of the enrolled factors and should be allowed to save his password. Is it possible?
As far as I know, Okta forgot password APIs needs to answer security question. Can we bypass it by verifying one of the enrolled factors? Or we want to implement our own verification logic. On top of that, can we just save new password to Okta?

Hello @AkashM.93135 (Western Union),
Thank you for postings.
There are two security questions in Okta. There is a security question used with MFA, and there is a separate security question for self-service recovery, which includes password resets. Resetting the security question for MFA will not reset the security question for self-service recovery.
There is no option for an admin to reset the security question for self-service recovery. If the user has forgotten the answer to their security question, they will need to contact an Okta admin to have the password reset. You can reset the password by pulling up the user's profile in the Okta admin console and clicking the "Reset Password" button.
Once the user is able to log in again, instruct the user to go to their Okta dashboard, navigate to the Settings page, and then there will be a "Forgot Password Question" box where they can change their security question/answer.
Regards,
Natalia
Okta Inc