Don't ask user to enter email address when doing password reset with username

Question

Hi,

I am using the below policy in order to reset the password of the user - https://github.com/azure-ad-b2c/samples/blob/master/policies/username-or-email/policy/PasswordReset_UsernameOrEmail.xml. I don't want the user to enter email address when user tries to reset password using username. Would you please advise on this?

Thanks.

Answer 1

Hi @Rets ,

Apologies for the delayed response! Somehow this question escaped my view.

An email address is required for password reset.

You can register a user in B2C without email using a custom policy, but the email is required for the password reset flow. I have passed feedback to the product team to allow the option to use a mobile number instead, and you are free to create your own feature request in the Ideas forum if you would also like to provide this feedback and offer some details about your scenario. https://learn.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows?pivots=b2c-custom-policy

-

If the information provided helped answer your question, please remember to "mark as answer" so that others in the community with similar questions can more easily find a solution.