AD B2C Tenant User flows - custom "forgot password" page leads to default "forgot password" page

Question

Greetings. We are experiencing a very specific problem.

We are using the AD B2C Tenant User flows for handling sign ups, sign ins and password resetting. For password reset we're using the Reset password (Recommended) user flow. Within this flow we have the "Forgot password page" for which we specify a custom page URI.

Now when we run this flow, things initially work as intended and we're presented with our custom page:

But the problem occurs once we verify the email and click next. We expect to see the page for resetting password (with fields for new password and for confirmation of the new password), but instead we're again presented with the first page (email verification), just that this time it's not our custom page, but Azure's default forgot password page (with our translations, don't mind that).

Then, only after verifying the email again on this page and clicking next, we get to our desired page:

The desired flow is to get redirected to the page on the last image when confirming the email for the first time. We have been looking for solutions all over the settings, configurations and documentations with no success at all.

Any help or pointing to the right direction would be greatly appreciated. If additional info is needed, we are happy to provide it.

Thanks in advance,

Rene

Answer 1

The solution was to turn off MFA.

We had MFA with email enabled on the password reset flow. This caused the user to first have to confirm his email for MFA and then again in order to reset the password. Turning MFA off solved the issue completely.

The confusing part was that on production we had the exact same configuration and it didn't ask the user for email confirmation twice.
The reason for that was apparently the fact that MFA triggers only if the user isn’t already registered and his email isn't yet verified.

Hope this helps anyone facing similar problems.

Answer 2

Hi @Rene Krajnc • Thank you for reaching out.

The only reason I can think of, which could be contributing to the issue, is due to the custom page that you have specified. If you use the default page, do you still get the page twice?

Could you please try using https://moviesdiag132.blob.core.windows.net/b2c/ResetPwd.html as the custom page and confirm if you still face this issue? If you don't face the issue with this page, try referencing this page to update your custom HTML page.

If you still face this issue, kindly share your HTML file and I will try to use that in my B2C tenant.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.