Expression Language for Password templates

Email templates use common and unique Expression Language (EL) variables. EL variables enable advanced customization and can prevent potential broken links when used in place of hard-coded URLs.

Some templates listed may not appear in your org. To obtain these templates, contact Okta Support.

An asterisk (*) indicates the variable is required for the template.

Forgot Password

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${resetPasswordLink}*String
${recoveryToken}*String
${resetPasswordTokenExpirationDate}Date

Forgot Password Denied

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.locale}String
${org.subDomain}String
${baseURL}String

Password Reset by Admin

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${token}String
${technicalContact.login}String
${technicalContact.email}String
${technicalContact.secondEmail}String
${technicalContact.firstName}String
${technicalContact.lastName}String
${technicalContact.locale}String
${resetPasswordTokenExpirationDate}String
${resetPasswordLink}*String

Password Changed

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${request.date}String
${request.time}String
${request.location}String
${request.performedBySubject)String

Active Directory Password Reset

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${resetPasswordLink}*String
${recoveryToken}*String
${resetPasswordTokenExpirationDate}Date
${samAccountName}String

Active Directory Password Reset Denied

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String

LDAP Forgot Password

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${resetPasswordLink}*String
${recoveryToken}*String
${resetPasswordTokenExpirationDate}Date