Azure-docs: Self-service password resets don't seem to work for a username-based accounts

[FredMurphy]

I have a number of users in my Azure B2C directory - some created as an email-based login and some as a username-based login.

Self service password reset seems to work for email-based logins. However, if I try a password reset for a username based login I get an error. I asks me to confirm and email address, which I do. This appears to work OK. However, when I click "continue" after this I get "An account could not be found for the provided user ID."

I believe it may be trying to find an account with this email address as the login.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: e8b5f81a-f216-b345-d434-c0ebbf70ff00
• Version Independent ID: e77fb894-d7a0-ae0c-7f4c-1030df97f073
• Content: Built-in policies in Azure Active Directory B2C
• Content Source: articles/active-directory-b2c/active-directory-b2c-reference-policies.md
• Service: active-directory
• GitHub Login: @davidmu1
• Microsoft Alias: davidmu

[jason-j-MSFT]

@FredMurphy could you provide a link to the documentation you are referencing?

[FredMurphy]

I created a password reset policy as per this page: https://docs.microsoft.com/en-us/azure/active-directory-b2c/active-directory-b2c-reference-policies#create-a-password-reset-policy

It works as expected for accounts that use an email address as a login.

[SaurabhSharma-MSFT]

@FredMurphy Can you please refer to a similar issue raised on Stackoverflow and let us know if you have everything correctly setup for password reset.

[SaurabhSharma-MSFT]

@FredMurphy We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.

[FredMurphy]

The problem account and the account that works were both created using the Graph API, which is the "correct" way according to the FAQ linked to by Wayne Yang MSFT in the Stack overflow article. I believe I have everything set up properly for a password reset. Password reset works for an account set up identically apart from the fact that one has an email login and the other has a username login.

I would reopen this issue if I could. Could you reopen it please? I don't feel it has been resolved. Giving me 12 hours to respond when this is overnight in the UK was a bit too quick.

[SaurabhSharma-MSFT]

@FredMurphy Sure, however, I suggest you open an Azure support ticket so that an Identity engineer could further check on it. Please let me know if you do not have support package, and I will help enable a one time free support ticket for you.

[FredMurphy]

We've almost finished getting a corporate Azure account setup, so I'll contact support through that.

If that's the more appropriate course of action and you can't/won't investigate as part of this issue ticket then I'll reclose it.

[mrent]

Any resolution on this? Facing the same issue. Password reset policy will not work on an account that was created through a script with username-based login. After sending the user through email verification and MFA verification, you can login with the account through the sign-in part of the sign-in/sign-up policy. But even then, the password reset policy fails after the verification email with the following error message: Unable to validate the information provided.