[ARCHIVED] Force Password Change

[JasonAsplund]

I'm setting up all users (students) with a generic password through our SIS csv upload. I'd like to require them to change their password on the first login, but can't find an option for that. I know they can change their own password in settings, but can I force them to do this on first login? Most systems allow for this.

[liz_laverty]

I have this same question (except for observers) and hoping that there's an easy fix for this.

[andres_palacio]

Good afternoon I have the same question on this subject, it would be very important to have this functionality.

[schachernp]

Good afternoon!  I too would like to see this functionality!  It would be very beneficial! 

[KV6]

Yeah same question too.

[KeeganS]

I absolutely agree. We created 1200 emails for students and getting them to log in to that was a true struggle. Then relying on that email in order for them to reset their password has been very difficult. I'd love to do a generic password first and then require a reset! I'm sort of new here, is there a place to request new features?

[colleen]

I need this as well. We work with high school students from a variety of school and want them to change the password as soon as they login. Tried to find something in the Javascript but couldn't find anything there yet.

[jrkinsella]

Checking back in on this question as we are wondering as well.  Did anyone come up with a solution?

[robert_hollenbe]

Hope this isn't too late to help someone!

We accomplish this by setting three fields in users.csv as follows:

• password = <null>
• authentication_provider_id = 'canvas'
• canvas_password_notification = true

By <null> I mean blank/empty/"" string. We send the second value as 'canvas' not 'Canvas' but IDK if it is case-sensitive?

The users.csv file is described at: https://rmit-lab.instructure.com/doc/api/file.sis_csv.html. The description for  the canvas_password_notification field tells us:

Defaults to false. When true, user is notified for password setup if the authentication_provider_id is canvas

---

Which is not especially clear. But IIRC, this was the hint that helped me figure this one out. If password field is not null, then Canvas seems to ignore the other two fields.

Caveat: This is not our prod instance. But I see no reason why it should not work.