How to determine if an user has a password?

[mgetka]

I want to provide an user with a different password change/set form, depending on whether the user has the password or not. Users without a password are those who have so far authenticated only via external IDPs. I cannot find any API that provides such information. I thought that maybe, since the user has no password, the user.passwordLastUpdateInstant attribute will be empty, but it has the same value as user.insert

[dan]

Hiya,

You're correct, I don't think this information is available. That's because a single user can have multiple different ways of signing in.

One possible solution would be to listen for a webhook on successful login and store off the authentication_type (as documented) value for each user/application combination (because a user might use Google for app A, Facebook for app B and email/pass for app C). Then you could look it up when displaying the password change/set form.

[kim]

@dan Hello, reaching out to know if this still the same, ie no way to know whether an user has a password or not?