> For the complete documentation index, see [llms.txt](https://docs.harmony.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.harmony.io/ai-agents/access-control/password-reset-request.md).
# Password Reset Request
The **Password Reset Request** agent automates password resets for identity provider users with identity verification and secure temporary password delivery.
### What it does
* Triggered when a user requests an IdP password reset
* Verifies user identity via OTP or Okta Verify push notification
* Resets user's password to a temporary password in their identity provider
* Generates a secure temporary password and requires the user to change it at next login
* Terminates all active sessions for the user across configured identity providers
* Sends the password reset link or OTP to the user's primary email, secondary email, or recovery email (including Microsoft Entra `otherMails` addresses)
* Sends message with temporary password via Slack or Teams
* Updates the ticket with status and outcome
### Triggers
**Event** - Runs when agent detects IdP Password Reset Request made by user.
The agent accurately distinguishes work account password reset requests from personal account requests. Gmail references are interpreted as Google Workspace work accounts only when the context clearly indicates it, preventing the workflow from triggering incorrectly for personal Gmail accounts.
### Approval
No approval required. The agent uses identity verification instead of approval workflow.
### Configuration
#### Identity Verification
Verify the employee's identity before resetting their password. Choose from two verification methods:
* **One-Time Password (OTP)** - A one-time password is sent to the user's primary email address, secondary email, or recovery email if available. The user must enter this code when prompted via direct message to verify their identity.
* **Okta Verify Push Notification** - Send a push notification to the user's Okta Verify app for quick and secure verification.
#### Password Reset Target
Select the identity provider where the password will be reset:
* **Okta** - Reset password in Okta identity provider
* **Microsoft Entra ID** - Reset password in Microsoft Entra (formerly Azure AD)
* **Google Workspace** - Reset password in Google Workspace
* **JumpCloud** - Reset password in JumpCloud identity provider
The agent supports Okta, Microsoft Entra, Google Workspace, and JumpCloud identity providers. It automatically discovers the employee's IdP integrations and terminates sessions across all configured providers.
#### Account Status and IDP-Aware Guidance
The agent identifies which identity provider an employee uses and tailors its guidance accordingly:
* **Entra ID employees** with a locked account are guided through a Password Reset workflow, since account unlock is not available for Entra ID.
* **Okta employees** with a locked account are offered both Unlock Account and Password Reset options.
* **Employees with both Okta and Entra ID accounts** receive clear, per-IDP instructions so they know exactly what action is available for each account.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.harmony.io/ai-agents/access-control/password-reset-request.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.