Skip to content

Latest commit

 

History

History
45 lines (29 loc) · 2.29 KB

active-directory-b2c-create-password-reset-policy.md

File metadata and controls

45 lines (29 loc) · 2.29 KB
author ms.service ms.topic ms.date ms.author
PatAltimore
active-directory-b2c
include
11/30/2018
patricka

To enable fine-grained password reset on your application, you use a password reset user flow. Note that the tenant-wide password reset option is specified here. This user flow describes the experiences that the customers will go through during password reset and the contents of tokens that the application will receive on successful completion.

[!INCLUDE active-directory-b2c-portal-navigate-b2c-service]

Under Manage, select User flows and click +New user flow.

Select New user flow

On the Recommended tab, select Password reset.

Enter a user flow Name for your application to reference. For example, enter SSPR.

Under Identity providers, check Reset password using email address.

Enter name and select reset password using email address as an identity provider

Under Application claims, click Show more and choose claims you want returned in the authorization tokens sent back to your application after a successful password reset experience. For example, select User's Object ID.

Click OK.

Select some application claims and click OK button

Click Create to add the user flow. The user flow is listed as B2C_1_SSPR. The B2C_1_ prefix is appended to the name.

Click Run user flow. Verify the settings specified in the table then click Run user flow.

Select user flow and run it

Setting Value
Application Contoso B2C app
Select reply url https://localhost:44316/

A new browser tab opens, and you can verify the password reset consumer experience in your application.

Note

It takes up to a minute for policy creation and updates to take effect.