Password Update fails for users in status provisioned

[Marek26]

Describe the bug

A user within status provisioned can request a "Forgot Password" mail via the widget an will receive the mail with an OTP.

After entering the OTP in the widget, it shows an Error "We found some errors. Please review the form and make corrections" and is not showing the Password Input fields.
No Console error was visible, payload from the introspect endpoint included all user information and looked fine for us.

From a user perspective, setting the password should work in that case (e.g. user has lost his initial welcome mail).
If this is unexpected behavior, also the "Forgot Password" mail shouldn't be sent but the "Password Forget not allowed" email for this user state.

Reproduction Steps

• Create new user and send activation mail
• Do not set the password (via the activationToken)
• Enter the username in the Widget
• Request a Password Reset Mail
• Retrieve OTP from mail
• Enter OTP into Widget

SDK Versions

Version ^7 (Okta Hosted), so should be currently 7.5.2

Additional Information

No response

[shuowu-okta]

@Marek26 Thanks for reporting the issue, we will investigate on it.

Internal Ref: OKTA-604706

[Marek26]

@shuowu-okta Could you please give me an update on that topic?

[Marek26]

@shuowu-okta: Any update?

[davibq]

@shuowu-okta facing this exact same issue. Are there any updates on OKTA-604706?