Expression Language for Password templates

Email templates use common and unique Expression Language (EL) variables. EL variables enable advanced customization and, when used in place of hard-coded URLs, can prevent potential broken links.

Some templates listed may not appear in your org. To obtain these templates, contact Okta Support.

Forgot Password

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${resetPasswordLink}String
${recoveryToken}String
${resetPasswordTokenExpirationDate}Date

Forgot Password Denied

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${resetPasswordLink}String
${recoveryToken}String
${resetPasswordTokenExpirationDate}Date

Password Reset by Admin

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${token}String
${technicalContact.login}String
${technicalContact.email}String
${technicalContact.secondEmail}String
${technicalContact.firstName}String
${technicalContact.lastName}String
${technicalContact.locale}String
${resetPasswordTokenExpirationDate}String
${resetPasswordLink}String

Password Changed

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${request.date}String
${request.time}String
${request.location}String
${request.performedBySubject)String

Active Directory Password Reset

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${resetPasswordLink}String
${recoveryToken}String
${resetPasswordTokenExpirationDate}Date
${samAccountName}String

Active Directory Password Reset Denied

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String

LDAP Forgot Password

EL Expression

Type

${user.login}String
${user.email}String
${user.secondEmail}String
${user.firstName}String
${user.lastName}String
${user.locale}String
${udLocale}String
${org.name}String
${org.activationTokenExpirationHours}Integer
${org.locale}String
${org.subDomain}String
${baseURL}String
${resetPasswordLink}String
${recoveryToken}String
${resetPasswordTokenExpirationDate}Date