Removed Google SSO from App and lost access for admin

Hello:

I wanted to remove Google linked accounts for my app not realizing it would remove my access as an admin and now I am locked out of my own app. Can someone please advise on getting back access? I am the only user so I can’t have someone else reset my password. How can I migrate a Google linked account to just a user password account?

Thanks in advance for any help.

Do you have an API token and/or credentials for an API Services app that is able to manage users? If you do, you can make an API call to set a password for your user.

Support is unable to assist with account lock out issues for developer org, so your only other option would be to create a new tenant. If you do make another org, we recommend ensuring that you are able to recover your account by having other admins within your org. More details about this recommendation here

Hello Andrea:

Thank you for the response. I do have an API token for user management and a client id for my app. Can I change the login from Google linked to just an okta/password there? Whenever I try to reset my password in Okta, it asks that I contact the org admin which is me.

You can use the Users endpoint to manually set a password for your admin user instead of trying to complete self-service password recovery. You would just make a PUT request to the user in question, with a request payload like the following:

{
  "credentials": {
    "password" : { "value": "myCoolNewPassword123!" }
  }
}

Here’s what that call looks like in Postman:

Once a password is set, the user can login via either Google or username or password, though you may need to tweak your Routing Rules to ensure the user will be prompted to provide their password credentials

Thank you. I will look into this and mark the solution when I have it figured out. Appreciate your time!

1 Like

@andrea My API token is no longer working. Is it possible for Okta to restore the Google SSO? I’m getting this when I try to login which leads me to believe if the identity provider is restored for my app, I’ll be back in. I can provide the tenant subdomain if that helps.

We will not be able to help you get access back into a free Developer org and mostly recommend recreating the org and ensure you have a way to get back into it (like having additional Super Admins): Recovery Steps in Case of Developer Edition Org Admin Account Lockout Post-MFA Enforcement | Okta Help Center