1
votes

After resetting the user password, b2c login page is not redirecting to the change password screen. It was working earlier.

Steps to reproduce:

reset the user's password via azure portal login using the temporary password login screen showing "Your password has expired." error message instead of redirecting to "Update expired password page"

Login screen

1

1 Answers

0
votes

We use password reset flow to reset password of Azure B2C user, but not click reset password button on user profile. Please refer to here to learn more about it.

And the error "Your password has expired." is expected.

When you reset the password using admin account from Azure AD Portal, a temporary password is generated which is marked as expired and requires the user to provide a new password. Since, in B2C there is a different mechanism for resetting password (i.e. by using Password Reset User flows/Custom Policies), users don't get the option to reset the password and only get The password has expired. message. In B2C, administrator accounts cannot be used to reset password of consumer accounts.

You may consider using one of the below custom policies:

  1. Azure AD B2C: Force password reset first logon

  2. Azure AD B2C: Force password after 90 days