Skip to main content
Version: Latest (4.0.6)

Initiate Password Reset

POST 
/password-srv/resetpassword?action=initiatereset

Starts a user-initiated password reset. requestId must be a valid authorization request id from the login/forgot-password flow (not an arbitrary UUID or user id). Required in the schema: requestId, resetMedium, and at least one user identifier (email, mobile, phone, username, sub/q, identifier, or mediumId — see request anyOf). processingType is optional (CODE or LINK; LINK is not valid with ivr).

Missing requestId or identifier returns HTTP 417 (VER_0005). An unknown or invalid auth requestId returns HTTP 400 (VER_0006).

OTP resend: the same OTP can be resent within a limited window so delayed delivery does not leave users with conflicting codes.

For complete usage guidance, see the user-initiated Password Reset Documentation.

Request​

Responses​

SUCCESS