# Keycloak required user actions

**URL:** <https://forum.keycloak.org/t/keycloak-required-user-actions/11939>\
**Category:** Getting advice\
**Tags:** authentication\
**Created:** [November 8, 2021, 8:55am UTC](https://forum.keycloak.org/t/keycloak-required-user-actions/11939 "2021-11-08T08:55:21Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![TemoSulava](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/temosulava/32/4323_2.png) [@TemoSulava](https://forum.keycloak.org/u/TemoSulava)\
**Post date:** [November 8, 2021, 8:55am UTC](https://forum.keycloak.org/t/keycloak-required-user-actions/11939/1 "2021-11-08T08:55:21Z")

</div>

I am interested how can i set the default required user action for the new user created in the keycloak?  
i went to Authentication → Required Actions → i ticked Update Password. Then i created user, but required user action for that user is empty and i need to manually choose the update password. Seems like it does not work, or there are other steps to it ?

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [November 8, 2021, 9:37am UTC](https://forum.keycloak.org/t/keycloak-required-user-actions/11939/2 "2021-11-08T09:37:16Z")

</div>

Are you checking both boxes? Enabled and Default? In order for it to be added when a new user is added, it must be selected as both.

---

<div class="post-metadata">

**Author:** ![TemoSulava](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/temosulava/32/4323_2.png) [@TemoSulava](https://forum.keycloak.org/u/TemoSulava)\
**Post date:** [November 8, 2021, 10:04am UTC](https://forum.keycloak.org/t/keycloak-required-user-actions/11939/3 "2021-11-08T10:04:28Z")

</div>

Yes i have both update password selected and default both are ticked, then i create new user, log in but i dont get prompted to change password. When i go to to user → edit the default field is empty and i can manually set the update password there… so seems like it does not update this field at all

---

<div class="post-metadata">

**Author:** ![xgp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/xgp/32/2589_2.png) [@xgp](https://forum.keycloak.org/u/xgp)\
**Post date:** [November 8, 2021, 10:23am UTC](https://forum.keycloak.org/t/keycloak-required-user-actions/11939/4 "2021-11-08T10:23:12Z")

</div>

How is the user being created? If you are creating it via admin or API and setting a password, or the user is creating it via registration, then UPDATE\_PASSWORD will get cleared. If you create via admin or API and don’t set a password, UPDATE\_PASSWORD will stay.

---

<div class="post-metadata">

**Author:** ![TemoSulava](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/temosulava/32/4323_2.png) [@TemoSulava](https://forum.keycloak.org/u/TemoSulava)\
**Post date:** [November 8, 2021, 10:43am UTC](https://forum.keycloak.org/t/keycloak-required-user-actions/11939/5 "2021-11-08T10:43:03Z")

</div>

Thank you for your time and attempt to help. since i was creating the user via Admin REST API, i added the boolean value ‘temproray’ to the body and now the password is temporary until first login and it prompts me for the change. Thank you