Login when the passwordChangeRequired field is true

[dan]

Do you know what the user experience is supposed to look like when passwordChangeRequired is set to true during user creation via API?

When they login for the first time, will they be prompted to enter a new password?

I have tried and it is just showing that my credentials are invalid, without prompting me to change them.

[dan]

If using the API, you should receive a 203 on Login once you attempt login with the correct password. Your application should check the status code and send the user to the appropriate place to change their password.

If using the hosted login pages, you should end up on the /password/change page after logging in.