bp4qi (bp4qi) asked a question.
Assistance Required for WIC Postman API Issue
Details of the Issue:
- Action: Create a new user with a password using Postman.
- Error: 403 Forbidden with the error summary "Invalid session."
Image is not available
Steps and Details:
- API Key: My API key is valid and unexpired, as I can retrieve current user data (without additional authorization) using the API key.
- User Information: All user details provided are accurate, and the password meets the specified requirements.
- Header: The API key is included in the header as SSWS {{apikey}}.
- URL and Parameters: The URL and parameters are correct, as provided by OKTA.
- Basic Auth: The correct username and password are being used in Basic Auth.
- Cookies: All cookies in Postman have been cleared prior to running the request.
Hi @bp4qi (bp4qi) , Thank you for reaching out to the Okta Community!
I'm using the pre-build "Users" collections for the Okta API to run the "Create a new user with a password" to test this and it's working fine in my environment.
The POSTMAN integration guide does reference the use of scoped access tokens for better security and access granularity, but for this testing environment I'm using a standard API token generated from the Okta Admin UI and I haven't had issue with it for the purposes of testing this out.
Similar "invalid session" issues reported seem to have been related to the token, as mentioned in this article.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Ask Us Anything about Okta FastPass - now thru December 11th.