Skip to main content

Create a temporary strong password credential

POST 
/nevisidm/api/core/v1/:clientExtId/users/:userExtId/tempstrong-password

Since: 8.2511.0

Required permission(s): AccessControl.CredentialCreate

Creates a new temporary strong password credential for the specified user.

The password is generated automatically by the server according to the configured policy. If a policy is specified, it must be of type TempStrongPasswordPolicy. If omitted, the default temporary strong password policy configured for the client is used.

Depending on the policy configuration, the response body may contain a tempStrongPassword field holding the plaintext password fragment that should be delivered to the user through a secure out-of-band channel (e.g. SMS or email). If the policy does not expose the fragment, the response body is absent and only the Location header is returned.

A Location header pointing to the newly created credential is always included in the response.

Each user can have at most one temporary strong password credential. Creating a second one requires deleting the existing credential first.

Request​

Responses​

Temporary strong password credential created successfully

Response Headers
    Location

    URL of the created resource

Last updated on