Delegated reset

Use this pipe when an authorized user resets the password for another user.

Depending on the user store, use one of the following use cases to enrich the default pipe with the required valves:

• Microsoft Active Directory
• Microsoft Entra ID
• Microsoft Entra ID with BankID
• Google Workspace
• Google Workspace with BankID

The skeleton below is not a working delegated reset pipe. Add the directory lookup, authorization checks, and reset operation from the appropriate use case before enabling it. An empty pipe does not change a directory password even if the request completes successfully.

Do not add DumpRequest, DumpSession, or DumpState to this flow. The request includes new_password; sessions and state can hold assertions and access tokens. Use scoped troubleshooting instead.

{
  "id": "delegated_reset",
  "display_name": "delegated_reset",
  "description": "Delegated Reset",
  "config": {
    "valves": []
  }
}