Verify the current admin password
Endpoints
Verify Admin Password
Syteca ACB REST API endpoint to verify the current built-in admin password matches the value the caller expects — used before triggering a rotation to confirm vault/Syteca sync.
POST
Verify the current admin password
Verifies the current built-in
admin password matches a value the caller provides. The canonical “pre-flight check” for an automated rotation workflow — call this before Change admin password to confirm the value in your secrets vault is still the current one. Catches desync between vault and Syteca before you replace a value that’s already been changed elsewhere.
For ACB deployments updated from a version prior to 1.2, switch to the
https://{hostname}/EkranACB server in the Playground.Permissions required
- The Access Token must be issued to an Internal or Active Directory user (not an Application Account) with the administrative User Management permission.
- The Refresh Token holder should not be the built-in
adminuser itself — see Admin password rotation → Prerequisites.
What the response means
The response has a single booleanverified field:
Rate limit
5 requests per minute per Access Token. Intentionally bandwidth-limited to make brute-force attacks impractical.Errors
See Status codes. Common errors:- 401 Unauthorized — invalid or expired Access Token.
- 403 Forbidden — user lacks administrative User Management permission.
- 429 Too Many Requests — rate limit exceeded.
Related
Admin password rotation
Concept page — how verify + change work together.
Change admin password
Step 2 — actually rotate.
API reference
Authentication, status codes.
Administrative permissions
User Management permission details.