Forgot Password page in OAAM Incorrectly Asks the User to Enter Old Password

(Doc ID 2215050.1)

Last updated on DECEMBER 16, 2016

Applies to:

Oracle Adaptive Access Manager - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

OAM/OIM and OAAM have been integrated. When accessing a resource protected by TAPScheme the user is redirected to the login page served by OAAM to enter username. After entering the username user clicks on "Forgot your Password?" link in order to be redirected to reset his password. After going through the security challenge he is taken to the /oaam_server/resetPassword.do page. 

Instead of seeing only the "New Password" and "Confirm New Password" labels he is also asked to enter his old password, the "Old Password" label being also present.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms