If Set Me Up is prompting for a password and rejecting it — even a valid one — the account is missing profile access. Follow the steps below to resolve the issue:
Why this happens
The Set Me Up dialog generates an identity token by accessing the user’s profile. If the account doesn’t have the Can Update Profile permission, that access is denied and the password prompt fails—regardless of what the user types.
The error "The password is incorrect, try again" indicates a profile access denial — not a credential mismatch. This behavior is by design.
This affects two types of users:
-
Users without an Artifactory-internal password (SSO, SAML, LDAP, and similar) — the password prompt doesn't apply to them and will always fail.
-
Users with a valid internal password — The password is correct, but the request is blocked before any credential validation occurs.
Fix
Enable profile access in SAML settings (administrators)
-
Go to Administration → Authentication → SAML SSO and edit your configuration.
-
Confirm Auto Create Artifactory Users is enabled.
-
Enable Allow Created Users Access to Profile Page.
-
Save the configuration.
This setting applies only to users created after saving. Existing users must be updated separately (see below).
Fix an individual user via the UI
-
Go to Administration → User Management → Users and open the affected user.
-
Enable Can Update Profile.
-
Save the changes.
After updating, have the user log out and back in, then reopen Set Me Up. The password prompt should be replaced by a Generate Token button.
Fix existing users via REST API
curl -H "Authorization: Bearer <admin-token>" \
-X PATCH "https://<your-instance>.jfrog.io/access/api/v2/users/<username>" \
-H "Content-Type: application/json" \
-d '{"profile_updatable": true}'For bulk updates, see:
https://jfrog.com/help/r/artifactory-update-edit-profile-on-a-list-of-users
After updating, have the user log out and back in, then reopen Set Me Up. The password prompt should be replaced by a Generate Token button.
Related