Skip to content

Forgot Password#


An administrator can configure the Gluu Server's built-in Forgot Password feature by following these steps:

  1. Provide the SMTP Server configuration
  2. Enable password reset on OxTrust adminUI
  3. Test

Security concerns#

Forgot Password is a feature of oxTrust, the admin GUI for the Gluu Server. In most production deployments, oxTrust should not be accessible via the Internet. It's simply too powerful. Because so, under most circumstances we instead recommend following the Forgot Password using SCIM tutorial.

For more information on oxTrust security recommendations, visit the security tips doc


The following are requirements to use this feature:

  1. An active Gluu Server instance with oxTrust accessible via the web
  2. A working SMTP Server

Provide the SMTP Server Configuration#

The Gluu Server requires an SMTP server to be able to send password reset emails to the user's mailbox. A suitable UI is provided to gather the SMTP server configuation on Gluu OxTrust AdminUI.

  1. Log into the Gluu Server as a user with admin privileges

  2. Navigate to Configuration > Organization Configuration

  3. Select the SMTP Server Configuration tab here

  4. Fill the form with correct values according to your SMTP Server settings here

  5. Click the Test Configuration button to ensure the SMTP server is working: If the configuration is correct, then you will see a successful message like this: here

  6. Click the Update button to save changes

Enable Password Reset on OxTrust#

  1. Navigate to Configuration > Organization Configuration

  2. Select the System Configuration tab

  3. Enable Self-Service Password Reset enable

  4. Click the Update button to save changes


  1. Create a test user in the Gluu Server

  2. Go to the Gluu Server login page

  3. Click the Forgot your Password? link login

  4. Fill the form with the user email and click the Send Mail button form

  5. You'll get the following result: form

  6. Check the user's mailbox