search

azure-ad-b2c / samples

Azure AD B2C custom policy solutions and samples.
830 stars 596 forks source link

Force Password Reset ignoring "continueOnPasswordExpiration" #200

Open kcrosby opened 3 years ago

kcrosby commented 3 years ago

I swear this was working a week or so ago when I set it up, but now when I reset a local B2C user's password through the portal, I get stopped during sign in with "The password has expired". I am sending continueOnPasswordExpiration inside login-NonInteractive as follows:

<InputClaim ClaimTypeReferenceId="continueOnPasswordExpiration" DefaultValue="true" AlwaysUseDefaultValue="true"/>

Anyone know if something has changed within the service on this?

MarcoL-4wardPRO commented 3 years ago

I am trying to achieve the same result, but the function seems buggy at the moment. After an admin password reset I always obtain "The password has expired" as an answer. No difference on using user flow or custom policy. Is anyone aware of recent B2C updates that may have broken It.

JasSuri commented 3 years ago

We noticed an issue here with custom policies and force password reset scenario. For now we’ve removed our doc on this whilst we work to fix it.

kcrosby commented 3 years ago

Hi @JasSuri, Glad you are looking into it. Any updates or estimates as to when we might hear something back?

Norrch2 commented 3 years ago

Bump.

edegilson commented 3 years ago

Hi guys. Any news on this?

rob-3c-4j commented 1 year ago

Any news to this?