Password update field missing and 401 unauthorized when trying to change password with API

[BretPehrson]

Using our organizations Admin account, I have tried opening student accounts to change their password but in the Update Login menu, there are no password or confirm password options available.

I tried to do a password update using the API but I am getting a 401 Unauthorized error but every other API call I have tried works. I created a new access token but that did not work either. 

I tried to use the live API at https://{institution}.instructure.com/doc/api/live and used the old as well as the new access tokens, went to the Login section and under PUT, I entered in our organization account_id, added the id for the student login_id (I also tried the student canvas_user_id) and added a new password in the login[password] field and I get a 401 Unauthorized error.

I verified in the permissions that the Account Admin role has access to 'Users - list view', 'Users - manage login details' and all over Users permissions are set as well.

Is there something else I could be missing?

[BretPehrson]

I was playing around with removing and adding access from the admin role and I no longer have access to the People link. I removed the 'User - list view' access, refreshed the page and the People link was gone. I added the access back but it is still missing from my account. I have another admin account that I logged into but it did not lose the People link when I removed the access. You can see that I am in the Admin page looking at Permissions and the 'Users - list view' is set but I can no longer see the People page. Any idea how to get that back? Also, none of my accounts that has the Account Admin role have access to update a users password still.

Account no longer showing the People link.

Account that does not have access to update password

 

 

[jmerlenbach2]

Hi Bret,

Does that account use SSO in order to login, or is it a local Canvas login? Because SSO logins rely on a third party Identity Provider, you cannot change those passwords local in Canvas - they have to be changed with the provider (Google, Microsoft Azure, etc).

I only have the ability to see a "change password" for logins that are created directly with Canvas.

[BretPehrson]

jmerlenbach2,

I do not have SSO turned on at this time. We have turned it on and set the authentication_provider_id to certain accounts in the past to test that feature but it was deleted and the accounts reset to not use that authentication_provider_id.

If I log into Canvas using an admin account, go to the admin section and then People, I can create a new account but it never asks for a password and I can't go back into that account and change the password. The option does not exist even for accounts that are created directly in Canvas.

[MatthewClifft · Accepted solution]

Hi Bret, 

This sounds like a Canvas support question, as it will most likely involve them double checking the settings and seeing if you need to reach out to your CSM. It is possible there is a backend setting that is restricting your access to edit passwords, as denoted in this guide. Based on your statements, it's highly likely this is the case. 

Additionally, please note that when you make changes on the permissions page, it does take approximately 30 minutes for them to be synced. Reaching out to Canvas support and explaining what you're seeing on your end is the best practice for a case like this. 

[BretPehrson]

Thanks for the reply MatthewClifft, I was able to put in a support ticket and get it resolved.

I was told that there is a setting which controls where admins can set passwords for users and it was disabled for my instance. This setting is only visible to instructure employees but they have enabled it and it is now working.