We want new users to change the temporary password on first login, in combination with TOTP?
This is our setup and we set a random temporary password:
The user is able to login, but is not forced to set a new password after the 2-step authentication process.
We noticed that the password setting in IAM automatically changed standard policy.
What did we do wrong?
Best answer by Harm Horstman
We found the reason for this issue ourselves. The setting ‘Expiration policy’ is set to ‘Default expiration policy’ when the task ‘Change Password’ is used.
Work around to make is work anyway, is to follow the step below in the order given
Create user with IAM authentication
Use task ‘Change password’ and set a temporary password
Update user, set ‘Expiration policy’ to ‘Force expired’
We found the reason for this issue ourselves. The setting ‘Expiration policy’ is set to ‘Default expiration policy’ when the task ‘Change Password’ is used.
Work around to make is work anyway, is to follow the step below in the order given
Create user with IAM authentication
Use task ‘Change password’ and set a temporary password
Update user, set ‘Expiration policy’ to ‘Force expired’
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.