Allow web app to change user password using access token?

Questions
1

My team is looking to implement a custom settings page for a web app, which does not have a secure backend to store api tokens. What we would ideally like is a way to send the Okta tenant the username and new password, alongside the user’s access token for authorization, which would then change the password to the new value.

I’ve seen multiple other ways that Okta allows a password change programmatically, but these all seem to involve relying on an api token in some way.

Is there any way to do this currently?

2

I’m not sure if it’s possible in this use case since it looks like the Okta API endpoints to change/reset the user’s password requires admin permissions. I would assume that the access token would need to be tied to an admin user.

3

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.