Skip to main content

We want new users to change the temporary password on first login, in combination with TOTP?

This is our setup and we set a random temporary password:

 

The user is able to login, but is not forced to set a new password after the 2-step authentication process. 

We noticed that the password setting in IAM automatically changed standard policy.

What did we do wrong?

We found the reason for this issue ourselves. The setting ‘Expiration policy’ is set to ‘Default expiration policy’ when the task ‘Change Password’ is used.

Work around to make is work anyway, is to follow the step below in the order given

  1. Create user with IAM authentication
  2. Use task ‘Change password’ and set a temporary password
  3. Update user, set ‘Expiration policy’ to ‘Force expired’

 

 

 

 

Terms & ConditionsCookie settings