Azure External ID Automatically authenticate user after password reset

Question

Mendoza, Arvin Ramil 0

Can it be configured to not automatically authenticate user after password reset using Azure External ID

Rukmini 42,595 Reputation points Microsoft External Staff Moderator

2026-02-25T13:23:09.32+00:00
Hello Mendoza, Arvin Ramil,

When utilizing built-in user flows, Microsoft Entra External ID cannot be set up to prevent automatic sign-in following a password reset. This behavior cannot be disabled using any settings.

The only option is:

To eliminate token issuance, handle it application level and alter the password reset process. After a reset, handle it in the application by signing the user out right away.

Let me know if any further queries - feel free to reach out!
Mendoza, Arvin Ramil 0 Reputation points

2026-02-25T14:00:50.1266667+00:00

Thank you for the confirmation Rukmini. Can you lead me to any documentations that touches custom policies for External Id?
Rukmini 42,595 Reputation points Microsoft External Staff Moderator

2026-02-25T14:08:35.17+00:00

Hello Mendoza, Arvin Ramil, Please check this https://learn.microsoft.com/en-us/answers/questions/4374383/azure-aad-b2c-migrate-custom-policies-and-template

If you are using built-in user flows in External ID:

Handle it at the application level

Detect the password reset scenario (if applicable)

Immediately sign the user out

Redirect them to the login page
Rukmini 42,595 Reputation points Microsoft External Staff Moderator

2026-02-26T12:27:04.96+00:00

Hello Mendoza, Arvin Ramil, Following up to see if the above provided information was helpful. If you have any further queries do let us know.

Your answer

Rukmini 42,595 Reputation points Microsoft External Staff Moderator

2026-02-25T13:23:09.32+00:00

Hello Mendoza, Arvin Ramil,

When utilizing built-in user flows, Microsoft Entra External ID cannot be set up to prevent automatic sign-in following a password reset. This behavior cannot be disabled using any settings.

The only option is:

To eliminate token issuance, handle it application level and alter the password reset process. After a reset, handle it in the application by signing the user out right away.

Let me know if any further queries - feel free to reach out!
Mendoza, Arvin Ramil 0 Reputation points

2026-02-25T14:00:50.1266667+00:00

Thank you for the confirmation Rukmini. Can you lead me to any documentations that touches custom policies for External Id?
Rukmini 42,595 Reputation points Microsoft External Staff Moderator

2026-02-25T14:08:35.17+00:00

Hello Mendoza, Arvin Ramil, Please check this https://learn.microsoft.com/en-us/answers/questions/4374383/azure-aad-b2c-migrate-custom-policies-and-template

If you are using built-in user flows in External ID:

Handle it at the application level

Detect the password reset scenario (if applicable)

Immediately sign the user out

Redirect them to the login page
Rukmini 42,595 Reputation points Microsoft External Staff Moderator

2026-02-26T12:27:04.96+00:00

Hello Mendoza, Arvin Ramil, Following up to see if the above provided information was helpful. If you have any further queries do let us know.