Hi @Tohar Kubani I dug into the logs for this user and found the root cause. Root Cause: No active password record found for user The

onetimeservice

is explicitly logging

No active password found for user

when they attempt to sign in with a password — this is what's triggering E062901 every time. The user simply does not have an active password record in Descope's storage. Why the "forgot password" loop doesn't fix it: The forgot password flow is sending a magic link that creates a temporary JWT (we can see

JWT created for user

in the logs), which logs them in momentarily. But the flow is not persisting a new password record — so as soon as they try to sign in with a password again, there's nothing to validate against and they hit E062901 again. Immediate fix for the user:

Set a password directly via the Management API, bypassing the flow:POST /v1/mgmt/password/set
{
  "loginId": "<user's email/login ID>",
  "password": "<new password>"
}

Or go to Descope Console → Users → find this user → set password manually. Longer-term fix: The "forgot password" flow for this project is likely missing the Update Password (

setPassword

) step — or that step is failing silently. The flow is authenticating via magic link/OTP but never writing the new password back. That step needs to be added/fixed in the flow configuration. Let me know if you need help with either fix!

we do call update password

and it works

image.png

Have you tried this ?

it doesn't matter if we do it through the console right?

because im not neara computer