Using Provider type FEDERATION with API

Questions
1

Hello, I need to create users without password that would rely on Federation for authentication. I found that if I did the credentials block in api payload, I can set Provider type to FEDERATION which should do it?

  • “credentials”: {
    • “provider”: {

      • “type”: “OKTA”, <—- change this to FEDERATION?

      • “name”: “OKTA”}},

Can someone confirm this please? Also, what is the default value if I don’t provide credentials block with provider type? Is it set to OKTA as in the documentation?

Thank you!

2

The suggested approach is to hit the RESET password flow API
https://support.okta.com/help/s/article/How-to-convert-Okta-user-to-Federated-provider-type?language=en_US

POST /api/v1/users/<USER_ID>/lifecycle/reset_password?provider=FEDERATION&sendEmail=false

Note that Federation users can also be converted back if required.

3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.