Password Reset Request

Automated password reset request with identity verification and temporary password delivery.

The Password Reset Request agent automates password resets for identity provider users with identity verification and secure temporary password delivery.

Password Reset Request agent overview

What it does

• Triggered when a user requests an IdP password reset
• Verifies user identity via OTP or Okta Verify push notification
• Resets user's password to a temporary password in their identity provider
• Generates a secure temporary password and requires the user to change it at next login
• Terminates all active sessions for the user across configured identity providers
• Sends the password reset link or OTP to the user's primary email, secondary email, or recovery email (including Microsoft Entra otherMails addresses)
• Sends message with temporary password via Slack or Teams
• Updates the ticket with status and outcome

Triggers

Event - Runs when agent detects IdP Password Reset Request made by user.

The agent accurately distinguishes work account password reset requests from personal account requests. Gmail references are interpreted as Google Workspace work accounts only when the context clearly indicates it, preventing the workflow from triggering incorrectly for personal Gmail accounts.

Approval

No approval required. The agent uses identity verification instead of approval workflow.

Configuration

Identity Verification

Verify the employee's identity before resetting their password. Choose from two verification methods:

• One-Time Password (OTP) - A one-time password is sent to the user's primary email address, secondary email, or recovery email if available. The user must enter this code when prompted via direct message to verify their identity.
• Okta Verify Push Notification - Send a push notification to the user's Okta Verify app for quick and secure verification.

Password Reset Target

Select the identity provider where the password will be reset:

• Okta - Reset password in Okta identity provider
• Microsoft Entra ID - Reset password in Microsoft Entra (formerly Azure AD)
• Google Workspace - Reset password in Google Workspace
• JumpCloud - Reset password in JumpCloud identity provider

The agent supports Okta, Microsoft Entra, Google Workspace, and JumpCloud identity providers. It automatically discovers the employee's IdP integrations and terminates sessions across all configured providers.

Account Status and IDP-Aware Guidance

The agent identifies which identity provider an employee uses and tailors its guidance accordingly:

• Entra ID employees with a locked account are guided through a Password Reset workflow, since account unlock is not available for Entra ID.
• Okta employees with a locked account are offered both Unlock Account and Password Reset options.
• Employees with both Okta and Entra ID accounts receive clear, per-IDP instructions so they know exactly what action is available for each account.

Working with AI Agents

Learn how to run and monitor agents

Configuring AI Agents

Configure verification and delivery