---
sourceDocument: Xanadu ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/servicenow-platform

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Customize password reset processes and integrate third-party credential services

# Customize password reset processes and integrate third-party credential services {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

To customize password reset processes or to integrate them with third-party credential services such as Okta or Microsoft Entra ID, use Integration Hub capabilities. Use Workflow Studio to create or modify actions like user unlock, change password, and get user status. Use Workflow Studio to create or modify subflows that perform the actions.

## Before you begin

Role required: admin, password_reset_admin, or password_reset_credential_manager

## About this task

* The base system provides actions, subflows, and credential store types for the "Local ServiceNow Instance" identity provider.
* For Microsoft Active Directory, the subflows are available when you activate the Microsoft AD Spoke for Password Reset app.
* To use any other identity provider such as Okta, you must use Integration Hub to create the required actions, subflows, and custom credential store types.
* For Microsoft Entra ID, the subflows are available when you activate the Microsoft Entra ID Integration for Password Reset app.
{#setup-pwd-reset-ihub__ul_sz3_s1d_h3b}

## Procedure

1. Use Workflow Studio to create password reset actions like user unlock, change password, and get user status.  
   For more information about Workflow Studio, see [Action
   Designer](https://www.servicenow.com/docs/access?context=actions&version=xanadu&pubname=xanadu-build-workflows&ft:locale=en-US).
2. Use Workflow Studio to create the following subflows.  
   Use the specified names, inputs, and outputs for the subflows. For more
   information about the subflows, see [Subflows](https://www.servicenow.com/docs/access?context=subflows&version=xanadu&pubname=xanadu-build-workflows&ft:locale=en-US).
   {#setup-pwd-reset-ihub__table_en2_pll_b3b__entry__5}

   | Subflow name | Input | Input type | Output | Output type |
   |-|-|-|-|-|
   | \<Provider Name\> Password Unlock | Password Reset Request | Record.Password Reset Request | Error Message | String |
   | \<Provider Name\> Password Unlock | Password Reset Request | Record.Password Reset Request | Status | Choice |
   | \<Provider Name\> Password Reset | Password | Password (2 Way Encrypted) | Status | Choice |
   | \<Provider Name\> Password Reset | Password Reset Request | Record.Password Reset Request | Error Message | String |
   | \<Provider Name\> Password Change | Password Reset Request | Record.Password Reset Request | Status | Choice |
   | \<Provider Name\> Password Change | Current Password | Password (2 Way Encrypted) Note: Name under Advanced options is <kbd class="ph userinput">old_password</kbd>. | Error Message | String |
   | \<Provider Name\> Password Change | New Password | Password (2 Way Encrypted) Note: Name under Advanced options is <kbd class="ph userinput">new_password</kbd>. | Error Message | String |
   | \<Provider Name\> Password Lock State | Password Reset Request | Record.Password Reset Request | Error Message | String |
   | \<Provider Name\> Password Lock State | Password Reset Request | Record.Password Reset Request | Locked | Choice |
   | \<Provider Name\> Password Lock State | Password Reset Request | Record.Password Reset Request | Status | Choice |
   | \<Provider Name\> Password Connection Test | Not Applicable | Not Applicable | Error Message | String |
   | \<Provider Name\> Password Connection Test | Not Applicable | Not Applicable | Status | Choice |
   [ ]

   {#setup-pwd-reset-ihub__table_en2_pll_b3b}
3. For third party providers, [create a credential store
   type](https://www.servicenow.com/docs/Hm3IBhGo~W7wuknpuZWODw "Create a custom credential store type when the base-system types do not meet your needs.").
   1. Select the Use Flow check box.
   2. Select the password reset subflows that you created for the provider.

   {#setup-pwd-reset-ihub__substeps_vdf_1ld_phb}  
   See [Password Reset application](https://www.servicenow.com/docs/mQCF39uihMP8na9atgxAMg "The ServiceNow Password Reset application enforces strong and secure passwords by enabling end users to reset or change their passwords either by using the self-service process or by requesting the assistance of a service desk agent.") for more information.
4. [Create password reset
   credential store](https://www.servicenow.com/docs/OciFDTZIdeR2R0xPeEAtGQ "Credential stores hold user information such as user names and passwords that can be used as login credentials. Examples include the User table [sys_user] or an Active Directory server.").
5. [Create a
   password reset process](https://www.servicenow.com/docs/txgFeJdjPkP9yJk9DwWKwQ "To implement the process, you configure credentials, verification methods and settings, and enrollment settings. You also specify to which users the process applies.").
6. Select the credential store type created for the provider.

## Result

The password reset mechanism for the required third-party application is set up.