AAD B2C: forget password doesn't work in sign up and sign in user flow

Question

I created a sign up and sign in user flow as the following.

It showed the following sign in page.

I typed in the email and click on Forgot your password, but I get access denied message.

Answer 1

Hi @Carol Lai · Thank you for reaching out.

The behavior you have mentioned is the expected behavior in legacy password reset flow:

1. The user selects the Forgot your password? link. Azure AD B2C returns the AADB2C90118 error code to the application.
2. Your application must be written to handles the error code and initiates a new authorization request. The authorization request specifies the password reset policy name, such as B2C_1_pwd_reset. To see an example of this, take a look at a simple ASP.NET sample, which demonstrates the linking of user flows.

To switch from legacy to recommended password reset flow, follow below steps. In this case, your application is not required to handle AADB2C90118 error code and B2C takes care of it.

1. Azure AD B2C > Select User flows > Select a sign-up or sign-in user flow (of type Recommended) that you want to customize > Select Properties > Under Password configuration, select Self-service password reset.
2. Under Customize in the left menu, select Page layouts > In the Page Layout Version, choose 2.1.3 or above > Select Save.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.