How to reset API Password, not user password for local api account?

[jralexander137]

Hi on 24.3. We have SSO enabled and I have created an Saviynt API account, set the password, set localauthenabled to 1 and set passwordexpired to false. The problem is that it looks like with version 24.x there is also an "API Password" associated with accounts. The newly created api account can authenticate with saviynt but is unable to complete api other api calls.

All we get is a 200 response with a body message "Please sign in to account" which I am assuming means the "API Password" for the account needs to be set but how do we do that when we have SSO enabled and therefore unable to locally authenticate?

[PremMahadikar]

Hi @jralexander137 ,

You don't see that option by default, but its available as feature access. Please assign it to the sav role and check.

Also, can you try login with the service user you are using for API calls as its newly created.

We had similar issue, once we logged in with the user, we need to first time Set Security Question on Login. (We had this set-in global configurations)

If you find the above response useful, Kindly Mark it as Accept As Solution and hit Kudos

[rushikeshvartak]

I have tested this in v24.4 and working as expected in SSO enabled environment

[jralexander137 · Accepted solution]

I figured out the problem. It was due to security questions needing to be created and since no way to locally log in with SSO enabled I had to disable that functionality. Once I did that, I just used the Rest Password API to reset the password. Service Account is able to make API calls now.

[rushikeshvartak]

You can also update security question using import sheet