Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

Naman Gupta 0 Reputation points
2026-08-24T08:41:37.25+00:00

We are evaluating Microsoft Entra External ID (External Tenant) and are looking for functionality similar to Azure AD B2C's dedicated Password Reset User Flow.

In Azure AD B2C, we can create a standalone Password Reset policy/user flow and provide users with a direct URL to initiate the password reset process. In Entra External ID, we currently only see the "Forgot password?" option embedded within the sign-in experience.

Could Microsoft confirm whether there is a supported method to:

  • Generate a direct URL that launches the password reset experience for local account users.
  • Send users directly to a password reset journey without requiring them to first access the sign-in page.
  • Create a dedicated password reset user flow equivalent to Azure AD B2C Password Reset policies.

If this capability is not currently available, is there a recommended approach or roadmap item for providing users with a direct password reset link in Microsoft Entra External ID?

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-08-24T08:41:57.52+00:00

    Microsoft Entra External ID does not currently provide a dedicated password reset user flow equivalent to Azure AD B2C password reset policies for external tenant customer journeys.

    Supported behavior in External ID is:

    • Password reset is part of the default sign-in flow.
    • There is currently only one user flow type, used for sign-in, sign-up, and password reset.
    • A separate custom reset-password user flow is not supported.

    Based on that, there is no supported method described here to:

    • generate a standalone direct password reset URL,
    • send users directly into a password reset-only journey without first entering the hosted sign-in experience,
    • create a dedicated password reset policy like Azure AD B2C.

    Relevant implementation details:

    1. External ID user flows are the policies used for sign-in, sign-up, and forgot password experiences.
    2. When users authenticate with the browser redirect model, they are redirected to a Microsoft Entra External ID user flow, and identity-related functions such as password reset occur within that flow.
    3. Azure AD B2C is the legacy solution that supported more customized user journeys through the Identity Experience Framework.

    For a B2C-to-External ID comparison, the migration guidance lists several built-in External ID capabilities, but it does not identify a standalone password reset user flow as a built-in feature.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. RoryB 705 Reputation points
    2026-08-26T04:41:06.59+00:00

    While you can't do this with the normal user flows, you can do something similar using native auth:

    https://learn.microsoft.com/en-us/entra/identity-platform/reference-native-authentication-api?tabs=emailOtp#self-service-password-reset-sspr

    "For users whose primary authentication method is email with password, use the self-service password reset (SSPR) API to enable customer users to reset their password. You can use this API for forgot password or change password scenarios".

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.