RenatoO.17465 (Customer) asked a question.
Hey Okta peeps,
I have weird situation, that some people may have found a solution for.
Premise:-
We have Okta hooked up to our Google instance + Slack etc etc. Currently all systems, with the exception of Google have Okta set up as the SSO.
When we have new users, we normally create a secure but memorable password that users needs to reset when they log into our systems.
Issue:-
When I implement Google into Okta SSO means that the password will be a long complicated thing that will end up being changed regardless. What I'd like is the ability to use Workflows to manually get these passwords changed into something a bit more memorable for the end user.
Has anyone had any experience on getting a good working workflow for this? I have managed to do some configuration but I don't know how to start the workflow as I'd like this to be done manually by our first line IT team.
Thanks,
Renato
@RenatoO.17465 (Customer) -- You would want to create a Delegated flow. Delegated Flows can be access via the Admin UI > Workflow > Delegated Flow and you can limit who is allowed to see them. There is other information but this should get you started:
https://support.okta.com/help/s/article/how-to-configure-delegated-workflows?language=en_US
Next, the API endpoint available that I am aware of are to "Reset" the password with a temporary password which is returned to the API Client. You can then use the temp password response to "Change" a password on a user since you now know the accounts password.
https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserCred/#tag/UserCred/operation/changePassword
I've attached a flow demonstrating this behavior.
setuserpassword