ARTIFACTORY: Set Me Up Shows "Password Is Incorrect" and Token Generation Fails

Products
Frog_Artifactory
Content Type
Administration_Platform
AuthorFullName__c
Jeremy Leopold
articleNumber
000006992
FirstPublishedDate
2026-05-24T09:07:20Z
lastModifiedDate
2026-05-24

ARTIFACTORY: Set Me Up Shows "Password Is Incorrect" and Token Generation Fails

If Set Me Up is prompting for a password and rejecting it — even a valid one — the account is missing profile access. Follow the steps below to resolve the issue:


Why this happens

The Set Me Up dialog generates an identity token by accessing the user’s profile. If the account doesn’t have the Can Update Profile permission, that access is denied and the password prompt fails—regardless of what the user types.

The error "The password is incorrect, try again" indicates a profile access denial — not a credential mismatch. This behavior is by design.

This affects two types of users:
  • Users without an Artifactory-internal password (SSO, SAML, LDAP, and similar) — the password prompt doesn't apply to them and will always fail.
  • Users with a valid internal password — The password is correct, but the request is blocked before any credential validation occurs.
User-added image 


Fix

Enable profile access in SAML settings (administrators)
  1. Go to Administration → Authentication → SAML SSO and edit your configuration.
  2. Confirm Auto Create Artifactory Users is enabled.
  3. Enable Allow Created Users Access to Profile Page.
  4. Save the configuration.
User-added image 

This setting applies only to users created after saving. Existing users must be updated separately (see below).


Fix an individual user via the UI
 
  1. Go to Administration → User Management → Users and open the affected user.
  2. Enable Can Update Profile.
  3. Save the changes.
After updating, have the user log out and back in, then reopen Set Me Up. The password prompt should be replaced by a Generate Token button.


Fix existing users via REST API
curl -H "Authorization: Bearer <admin-token>" \
    -X PATCH "https://<your-instance>.jfrog.io/access/api/v2/users/<username>" \
    -H "Content-Type: application/json" \
    -d '{"profile_updatable": true}'
For bulk updates, see:
 https://jfrog.com/help/r/artifactory-update-edit-profile-on-a-list-of-users

After updating, have the user log out and back in, then reopen Set Me Up. The password prompt should be replaced by a Generate Token button.


Related