What problem are you observing?
When a user goes through to reset their password via OTP from the Help Desk the uid(username) is case-sensitive and has to match what the user put in IDN, otherwise the token won’t validate.
What is the correct behavior?
Username validation for OTP via webservices shouldn’t be case sensitive. I filed a support ticket with SailPoint and was told this is expected behavior. This doesn’t seem like the appropriate behavior.
What product feature is this related to?
IDN and calling POST: /beta/generate-password-reset-token/digit
What are the steps to reproduce the issue?
Generate an OTP for a user using: POST: /beta/generate-password-reset-token/digit and specify the userId in all uppercase. In IDN go through the password reset flow and put in the username as lowercase.
Do you have any other information about your environment that may help?
N/A
