Reset Password

Create a new password.

POST/organizations/{organizationId}/oauth2/password/action

Use it in a workflow

Add a step and choose the Salesforce Commerce Cloud connector.
Pick the Reset Password action (under Auth (SLAS)).
Fill in the fields below, then reference the result from later steps as {{resetPassword.response.data}}.

Request

Path parameters

organizationIdstringrequired

An identifier for the Salesforce Commerce Cloud organization the request is being made by. It consists of a prefix 'f_ecom_' followed by a 4-character [realm identifier](https://developer.salesforce.com/docs/commerce/commerce-api/guide/get-started.html) and a 3-character [instance type identifier](https://developer.salesforce.com/docs/commerce/commerce-api/guide/get-started.html#instance-types).

Headers

Authorizationstring

Base64-encoded string for HTTP Basic authentication. The string is composed of a client ID and client secret, separated by a colon (`:`), for example: `clientId:clientSecret`

Request body

Enter the body as JSON in the step's Body field.

client_idstringrequired

-| The public client ID. When using the `hint` query parameter either a public or private client ID can be used.

pwd_action_tokenstringrequired

Password action token that was returned from the `/password/reset` endpoint.

code_verifierstring

PKCE code verifier. Created by the client. The `code_challenge` is created by SHA256 hashing the `code_verifier` and Base64 encoding the resulting hash. The `code_verifier` should be a high entropy cryptographically random string with a minimum of 43 characters and a maximum of 128 characters.

new_passwordstring

The new password to set for the shopper associated with the password action token.

channel_idstringrequired

The channel that the request is for. For a B2C Commerce request, this is angalous to the site ID.

hintstring

Adding a `hint` query parameter with a value of `cross_device` will remove the need to have the code_verifier for password reset request. If the `hint` query parameter is used it must also have been used in the password action request.

user_idstring

User ID for logging in. This is the id that is used to log into SFCC. Required only when hint is provided.

json

{
  "client_id": "6b200ebd-7843-4073-aef9-792482c9e1de",
  "pwd_action_token": "QJO3CA7QTPVCQ3OMROXF2MTDDED3EEC3",
  "channel_id": "RefArch",
  "code_verifier": "Ar0lAwU_jsuA~ZXX8-JnMbZFxrnDot2OtgLEi1kOT_FxD6Bo0EQDbbrvoym9xHvatNGnNzrObLJeK6e4U9m4pveRMbdwNGa4jwiAlKGvijVn0PW0hqb03_w1gQE00wTo",
  "new_password": "new_password",
  "hint": "cross_device",
  "user_id": "samantha.sampleson@example.com"
}

Response

Returns 200 with a any. Read it in later steps with {{resetPassword.response.data.<field>}}.

Need more? See the Salesforce Commerce Cloud guide for connection setup and behaviour shared by every action.

Was this page helpful?