Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

Naman Gupta 0 Reputation points
2026-08-24T08:41:37.25+00:00

We are evaluating Microsoft Entra External ID (External Tenant) and are looking for functionality similar to Azure AD B2C's dedicated Password Reset User Flow.

In Azure AD B2C, we can create a standalone Password Reset policy/user flow and provide users with a direct URL to initiate the password reset process. In Entra External ID, we currently only see the "Forgot password?" option embedded within the sign-in experience.

Could Microsoft confirm whether there is a supported method to:

  • Generate a direct URL that launches the password reset experience for local account users.
  • Send users directly to a password reset journey without requiring them to first access the sign-in page.
  • Create a dedicated password reset user flow equivalent to Azure AD B2C Password Reset policies.

If this capability is not currently available, is there a recommended approach or roadmap item for providing users with a direct password reset link in Microsoft Entra External ID?

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. RoryB 705 Reputation points
    2026-08-26T04:41:06.59+00:00

    While you can't do this with the normal user flows, you can do something similar using native auth:

    https://learn.microsoft.com/en-us/entra/identity-platform/reference-native-authentication-api?tabs=emailOtp#self-service-password-reset-sspr

    "For users whose primary authentication method is email with password, use the self-service password reset (SSPR) API to enable customer users to reset their password. You can use this API for forgot password or change password scenarios".

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-08-24T08:41:57.52+00:00

    Microsoft Entra External ID does not currently provide a dedicated password reset user flow equivalent to Azure AD B2C password reset policies for external tenant customer journeys.

    Supported behavior in External ID is:

    • Password reset is part of the default sign-in flow.
    • There is currently only one user flow type, used for sign-in, sign-up, and password reset.
    • A separate custom reset-password user flow is not supported.

    Based on that, there is no supported method described here to:

    • generate a standalone direct password reset URL,
    • send users directly into a password reset-only journey without first entering the hosted sign-in experience,
    • create a dedicated password reset policy like Azure AD B2C.

    Relevant implementation details:

    1. External ID user flows are the policies used for sign-in, sign-up, and forgot password experiences.
    2. When users authenticate with the browser redirect model, they are redirected to a Microsoft Entra External ID user flow, and identity-related functions such as password reset occur within that flow.
    3. Azure AD B2C is the legacy solution that supported more customized user journeys through the Identity Experience Framework.

    For a B2C-to-External ID comparison, the migration guidance lists several built-in External ID capabilities, but it does not identify a standalone password reset user flow as a built-in feature.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.