Skip to content

Password Reset#

Overview#

The Gluu Server includes a basic feature to enable users to perform self-service password resets. This feature only works for passwords stored in the Gluu Server, i.e. if passwords are stored in a backend system, this feature will not work.

In order to use this feature, follow these steps:

  1. Complete SMTP Server configuration
  2. Enable password reset in oxTrust
  3. Test

Attention

For production deployments, we recommend writing a custom "Forgot Password" page that leverages Gluu's SCIM APIs. Follow our tutorial here.

Prerequisites#

The following are requirements to use this feature:

  1. An active Gluu Server instance with oxTrust accessible via the web
  2. A working SMTP Server

Provide the SMTP Server Configuration#

The Gluu Server requires an SMTP server to be able to send password reset emails to the user's mailbox. A suitable UI is provided to gather the SMTP server configuation on Gluu OxTrust AdminUI.

  1. Log into the Gluu Server as a user with admin privileges

  2. Navigate to Configuration > Organization Configuration

  3. Select the SMTP Server Configuration tab here

  4. Fill the form with correct values according to your SMTP Server settings here

  5. Click the Test Configuration button to ensure the SMTP server is working: If the configuration is correct, then you will see a successful message like this: here

  6. Click the Update button to save changes

Enable Password Reset on OxTrust#

  1. Navigate to Configuration > Organization Configuration

  2. Select the System Configuration tab

  3. Enable Self-Service Password Reset enable

  4. Click the Update button to save changes

Test#

  1. Create a test user in the Gluu Server

  2. Go to the Gluu Server login page

  3. Click the Forgot your Password? link login

  4. Fill the form with the user email and click the Send Mail button form

  5. You'll get the following result: form

  6. Check the user's mailbox
    form