Oracle Access Manager (OAM) Forgot Password functionality Rules Are URL ENCODED (Doc ID 2823701.1)

Last updated on MARCH 15, 2023

Applies to:

Symptoms

After enabling\setup up OAM's forgot password feature there are Password rule text Issues, the password rule text in the One Time Pin (OTP) password reset screen is displayed with encoded characters and is not end-user friendly

• When using the 12c forgot password functionality the /otpfp/userSelect page displays the fields for otp, new password, and confirm new password
• Below that are the rules for the new password which are shown as follows:

Password%20must%20be%20at%20least%201%20character%28s%29%20long.
Password%20must%20contain%20at%20least%201%20special%20character%28s%29.
Password must not match or contain last name.
Password must not match or contain user ID.
Password must start with an alphabetic character.

• Notice that the 1st 2 rules appear to be URL encoded as the spaces are replaced with %20 characters.
• This problem occurs no matter which method is chosen to deliver the OTP.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.