B2C Tenant Password reset email issue

Kumar Krishnamoorthy 21 Reputation points
2026-06-05T01:02:42.0533333+00:00

When we use the Self-service password reset in our Azure B2C tenants, it triggers the password reset verification email.

But the emails are not getting received. We tried with multiple email addresses from different domains and none of them work. This was in an existing B2C tenant, which we know was working well a month ago for the same email addresses with no changes to the policies in between.

Tried with other B2C tenants as well and it seems to be same effect. No verification code emails.

What else could we be missing?

Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Answer accepted by question author
Shubham Sharma 17,930 Reputation points Microsoft External Staff Moderator
2026-06-05T02:08:50.7266667+00:00

Hey Kumar, it sounds like your B2C password-reset flows are firing off fine, but the verification emails just never land. Since you’ve already verified there were no policy changes and it worked a month ago across tenants, this points to an email-delivery issue on the B2C side. Here’s what you can do:

  1. Check Azure Service Health • Head into the Azure portal > Service Health and see if there are any active incidents or advisories for “Azure AD B2C Self-Service Password Reset email” in your region. Microsoft recently changed the backend email provider and there have been transient service hiccups.
  2. Verify user-flow configuration • In Azure AD B2C > User flows > select your sign-in or sign-up/sign-in flow – Under Properties > Password configuration, ensure Self-service password reset is Enabled – Under Page layouts, pick version 2.1.3 or later and save
  3. Troubleshoot delivery end-to-end • Turn on diagnostic logging for your B2C tenant (Azure Monitor > Diagnostic settings) • Run a Kusto query against the logs to spot any failed SendEmail operations (category “EmailVerification” or similar) • If you can capture an email header (for any emails that do arrive), paste it into an MXToolBox or similar service to see where it’s being dropped or marked as spam
  4. Whitelist Microsoft’s B2C email domains • By default, B2C sends from a Microsoft-managed domain that may be blocked by some mail filters. Ask your recipients’ mail admins to allow the B2C email sender domain, or check their spam/quarantine.
  5. Consider a custom email provider for guaranteed delivery • If you need full control over SPF/DKIM and throttling, configure SendGrid, Mailjet, etc. in your tenant. That way you manage the sending domain, and you can track delivery natively.

Hope this gets your password-reset emails flowing again!

References:

https://learn.microsoft.com/azure/active-directory-b2c/add-password-reset-policy#self-service-password-reset-recommended

Was this answer helpful?

2 people found this answer helpful.
0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.