Share via

How to provide change password link in our application

Mark Jerzykowski 0 Reputation points
2024-08-10T21:24:44.4833333+00:00

Is it possible to provide a link in to the change password flow for an already authenticated user? i.e. they've already signed in to Entra External ID, redirected back to our application but we'd like to give them a button to "Change your password".

The documentation here talks about "Common URL" but also says that you can turn off "Show self-service password reset". That would imply that you can still get to that functionality some other way?

Thanks

Microsoft Security | Microsoft Entra | Microsoft Entra External ID

2 answers

Sort by: Most helpful
  1. CharliePerkins 0 Reputation points
    2025-11-25T20:58:50.76+00:00

    We use the link below to direct users to the password change dialog.

    https://mysignins.microsoft.com/security-info/password/change

    0 comments No comments

  2. Gudivada Adi Navya Sri 21,095 Reputation points Moderator
    2024-08-13T07:47:32.3033333+00:00

    Hi @Mark Jerzykowski

    Thank you for posting this in Microsoft Q&A.

    I understand that you would like to add a "Change Your Password" button for users signed into Entra External ID. If my understanding of the issue is incorrect, feel free to post back.

    In B2C tenant if a user knows their password and wants to change it, we can use a password change flow. A user can change their password by using the self-service password reset flow if they forget their password and want to reset it.

    But in external tenant we have the self-service password reset flow where users reset or change their password. With the help of 'forgot password' feature already authenticated user can be able to reset/change the password in Entra External ID. This option becomes available during the sign-in process. Instead of the forgot password text, you can change the text to 'Change your password' with the help of the password collection display text.

    For more information: To customize self-service password reset

    User's image
    As indicated in the documentation, it is possible to disable the Show Self-Service Password Reset (SSPR) feature and replace the default URL with a common one. However, if SSPR is disabled, users will not be able to reset their passwords or see the 'Forgot' option on the sign-in page. The common URL value will only be working on the sign-in page if the SSPR option is enabled.

    Hope this helps. Do let us know if you any further queries.

    Thanks,

    Navya.

    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.