Why does my Azure AD B2C forget password user flow executes verification step twice?

Jason Susanto 0 Reputation points
2023-10-08T23:20:50.8066667+00:00

Hi All,

Does anyone know why does my Azure AD B2C forget password process within the login user flow executes the Email MFA verification step twice? The first it executes the MFA verification for the forget password flow, and the next it jumps back into the sign in MFA verification and once the user has done the MFA verification twice, it then allows the user to change and reset their password. Is there a way to fix this without using custom policy?

Thanks for the help!

Azure Cloud Services
Azure Cloud Services
An Azure platform as a service offer that is used to deploy web and cloud applications.
652 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,966 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,779 questions
{count} votes

1 answer

Sort by: Most helpful
  1. James Hamil 22,186 Reputation points Microsoft Employee
    2023-10-09T15:25:42.2966667+00:00

    Hi @Jason Susanto , In general, the Azure AD B2C forget password user flow executes the Email MFA verification step to ensure that the user who is resetting the password is the same user who owns the email address associated with the account. If the user has already completed the MFA verification for the sign-in process, it should not prompt the user to do it again during the forget password process.

    To troubleshoot the issue, please check the following:

    1. Verify that the user flow is configured correctly and that the MFA verification step is only included once in the user flow.
    2. Check if there are any conflicting policies or settings that may be causing the issue.
    3. Ensure that the user is not using different email addresses for sign-in and forget password process.

    Please let me know if you have any questions and I can help you further.

    If this answer helps you please mark "Accept Answer" so other users can reference it.

    Thank you,

    James