# Force newly created user to modify their own password on initial login **URL:** \ **Category:** Ignition\ **Tags:** ignition83, perspective\ **Created:** [August 12, 2026, 12:53am UTC](https://forum.inductiveautomation.com/t/force-newly-created-user-to-modify-their-own-password-on-initial-login/116760 "2026-08-12T00:53:09Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![r123](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@r123](https://forum.inductiveautomation.com/u/r123)\ **Post date:** [August 12, 2026, 12:53am UTC](https://forum.inductiveautomation.com/t/force-newly-created-user-to-modify-their-own-password-on-initial-login/116760/1 "2026-08-12T00:53:09Z")
I was just wondering if there was a way to set it so that newly added users in the default user source would be required to create their own password the first time they log in? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [August 12, 2026, 1:27am UTC](https://forum.inductiveautomation.com/t/force-newly-created-user-to-modify-their-own-password-on-initial-login/116760/2 "2026-08-12T01:27:55Z")
The Identity Provider standards don't provide any mechanism for setting passwords, or writing to any other account attributes. Simply not possible from the Ignition side. (Vision, with classic auth strategy, could do something with users sources after an auto-login.) ---
**Author:** ![r123](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@r123](https://forum.inductiveautomation.com/u/r123)\ **Post date:** [August 12, 2026, 2:02am UTC](https://forum.inductiveautomation.com/t/force-newly-created-user-to-modify-their-own-password-on-initial-login/116760/3 "2026-08-12T02:02:51Z")
As per usual, I am both thankful and saddened by your posts. Any chance Ignition 8.3 supports a SCIM Bulk endpoint? ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [August 12, 2026, 2:09am UTC](https://forum.inductiveautomation.com/t/force-newly-created-user-to-modify-their-own-password-on-initial-login/116760/4 "2026-08-12T02:09:51Z")
![Screenshot 2026-08-11 at 7.09.17 PM](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/6/a64bf4defa229a1b46945219ec3013ff68bd6895.png) Looks like no; you can check the API documentation to be sure: > **[API Documentation | Ignition User Manual](https://www.docs.inductiveautomation.com/docs/8.3/platform/gateway/openapi)** > > The API documentation in the Gateway provides a complete, dynamically generated specification of the HTTP API routes made publicly available by the Gateway and installed modules. These routes allow external systems to securely interact with Ignition... ---
**Author:** ![r123](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@r123](https://forum.inductiveautomation.com/u/r123)\ **Post date:** [August 12, 2026, 2:33am UTC](https://forum.inductiveautomation.com/t/force-newly-created-user-to-modify-their-own-password-on-initial-login/116760/5 "2026-08-12T02:33:28Z")
Thanks. I did do a search in the online API info and it only found one reference, unrelated that mentioned bulk. I just thought I'd ask cuz I always wonder if there's something else called something else that could do something similar. ---
**Author:** ![Chris\_Bingham](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@Chris\_Bingham](https://forum.inductiveautomation.com/u/Chris_Bingham)\ **Post date:** [August 12, 2026, 4:27am UTC](https://forum.inductiveautomation.com/t/force-newly-created-user-to-modify-their-own-password-on-initial-login/116760/6 "2026-08-12T04:27:49Z")
With appropriate context, isn’t it possible to set a user’s `InternalUserRecord.PasswordDate`? ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [August 12, 2026, 4:08pm UTC](https://forum.inductiveautomation.com/t/force-newly-created-user-to-modify-their-own-password-on-initial-login/116760/7 "2026-08-12T16:08:21Z")
In theory, yes, you could do so via scripting against the internal user source. It would be non-trivial and involve a fair amount of reverse engineering of our codebase to get it to happen in the right way, or I guess writing out just the right values to disk? I'm not sure exactly how/where this user metadata is stored as of 8.3 to be honest.