Password Reset Redirects to "Sign In Failed" page

(0) Share

Report

Posted on by Bryant Boyer

106

Hey all,

I've configured my Power Apps portal to use Azure B2C for external authentication. Everything works great except for this one piece. When a user resets their password they are redirected to .../Account/Login/ExternalAuthenticationFailed with this error:

If they click "Sign in" and use their newly reset password, they authenticate correctly. What that means is that the password reset flow is resetting their password correctly, but just redirecting the user to an error page. How can I change this user experience?

Note: I set up the Azure AD B2C using the wizard at make.preview.powerapps.com so I haven't manually configured any settings.

All responses (16)

Answers (1)

Christian Leverenz 1,214 on at

Like (0)

Report

Re: Password Reset Redirects to "Sign In Failed" page

Hi @bechespuiaovi ,
i think pkce is not supported in portals. Had the same issue a while ago and we had to switch the challenge off for the application registered for portals (was not ad, but another provider).
See here for the doc: https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/configure-openid-provider
Sorry for the disappointing answer,
Christian
bechespuiaovi 2 on at

Like (0)

Report

Re: Password Reset Redirects to "Sign In Failed" page

Hi Oliver,

How about the case when the AAD app is configured to be used in Authorization Code Flow with PKCE ? This is my case, I can't enable any checkboxes as here:

Whats the solution in this case? I get the same redirect to error page after password reset.

Thanx
greggdavenport 55 on at

Like (0)

Report

Re: Password Reset Redirects to "Sign In Failed" page

Thank you @FlowHawk !
Bryant Boyer 106 on at

Like (0)

Report

Re: Password Reset Redirects to "Sign In Failed" page

@gdavenport glad it got you through it! It's definitely a difficult journey to take on. After Oliver helped me through this issue I made a youtube video so that I wouldn't forget the whole process I went through: Leverage Azure B2C for Authentication in Power Apps Portal - YouTube

If you get stuck again, it might be of help.
greggdavenport 55 on at

Like (0)

Report
Re: Password Reset Redirects to "Sign In Failed" page

ok two things on this:
I can't even access a wizard for setting up B2C for my portals
I've been wrestling with the Microsoft documentation for manual B2C setup for 3 days and it's been terribly frustrating. This forum post saved the day, thank you so much!
justinburch Microsoft Employee on at

Like (0)

Report

Re: Password Reset Redirects to "Sign In Failed" page

Hi @FlowHawk,
If you haven't already, I would definitely recommend submitting a ticket to Microsoft so this can be appropriately tracked and investigated. I'm not sure if anyone from the product team browses this community, but I think that's their preferred method of identifying issues so that they know who the point of contact is.
Glad to see you got a workaround, though!
oliver.rodrigues 9,342 Most Valuable Professional on at

Like (1)

Report

Re: Password Reset Redirects to "Sign In Failed" page

I am glad it worked

@justinburch would you be able to let the product team aware of this possible issue?
Bryant Boyer 106 on at

Like (1)

Report

Re: Password Reset Redirects to "Sign In Failed" page

Thank you Oliver!! I applied all the changes except the claims ones and it worked!!

I don't know if anyone from the product team is here in the forum, but it would be helpful feedback I think that the wizard in the make.preview.powerapps.com sets up the issuer incorrectly for password reset flows.

Thanks again Oliver, you rock!
Verified answer

oliver.rodrigues 9,342 Most Valuable Professional on at

Like (1)

Report
Re: Password Reset Redirects to "Sign In Failed" page

Thanks for the snapshots.. try the follwoing changes:

App Registration > Authentication

add another Redirect URI, with just the Portal URL

enable ID Tokens for implicit grant

SignUpSignIn > Properties

those look fine to me

SignUpSignIn > User Attributes / Application Claims

I normally also enable Surname/Given Name, but that's optional

Reset Password > Properties

Issuer claim doesn't seem right to me, can you select the other (non-TFP) option from the drop-down (but keep TFP selected in the toggles there):

Reset Password > Application Claims

In my environment I only have selected Given Name/Surname, but I don't think this would make any difference

Portal Configuration > Valid Issuers

Here you need both Issuer URL for your Sign Up Sign In + Reset Pwd flows, the article above I shared explains how to retrieve those URLs

hope this helps
Bryant Boyer 106 on at

Like (0)

Report

Re: Password Reset Redirects to "Sign In Failed" page

Here are some screenshots. This is all in the developer tenant where I didn't make any customizations: