且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

更改Azure AD B2C注册或登录策略的忘记密码链接

更新时间:2023-02-16 09:05:02

我可以使用链接重设密码,但最后会出现错误. 我所做的是通过请求登录"政策并提取无法访问您的帐户"链接并附加我的公司品牌.

这一直持续到最后一步.它向我展示了我的公司品牌.它允许我重设密码,但最终会出现错误.而且我无法自动登录.如果我使用重置密码重新登录,则可以使用.

我意识到获取链接是不够的,因为链接中的CTX查询字符串是针对登录"策略生成的,因此我尝试在其中使用它 注册或登录".长话短说,无法访问您的帐户"用于登录"策略,不能用于其他策略.

When using Sign-in policies, there is a password reset link => "Can’t access your account". By click on this link, the users get Microsoft's out-of-the-box password reset process in which they are presented with a CAPTCHA to receive validation code and for which I can require MFA.

I want to reuse this feature on the unified "Sign-up or sign-in" policies which present a different link for this => "Forgot your password". I want that link to redirect to Microsoft's out-of-the-box password reset functionality as well.

I am not sure if this possible. If this is not possible, can I construct the link on "Sign-up or sign-in" response handler. I just want to see if anyone done this before or this not good approach.

I could use the link to reset password but I will get error at the end. What I did was by making a request to "Sign-in" policy and extract the "Can’t access your account" link and append my company brand.

This worked until the last step. It showed me my company brand. It allowed me to reset my password but at the end it will through error. And I was not be able to auto login. If I re-login with reset password it works.

I realized that getting the link is not enough as the CTX query string in the link is generated for for "Sign-in" policy and I am trying to use it in "Sign-up or sign-in". Long story short, "Can’t access your account" is for "Sign-in" Policy and can't be used for other policy.