Forget password does not work

General
,
1

Hello Pega comunity,

I am facing a problem on all envs: when an end user forgets his password, he click on a link to display a html screen
to enter the OTP code verification recieved via email (well received), he enters the code then when click on the submit button it redirect him to the login page instead of the screen where he should enter and confirm a new password. No recent changes on the HTMLs (more than one year half). Any one could help please?

Here is a section of code of the submit button after entering the verif code (from pyForgotPassword):

<button id='btnSubmitSndOTP' class="loginButton" name="pyActivity=Code-Security.pzValidateOTP" type="submit" onClick="removeErrorMessage();" >

            <span class="loginButtonText" ><pega:lookup property="pxRequestor.pyButtonLabel" value="Submit" /></span>

        </button>
2

Hi @AmiraF34

It will automcatically sent OTP, Just you need to configure email account

if you configred at, → Org & Security > Authentication > Security Policies

→ Email account from which one-time password needs to be sent

OTP.jpg
OTP.jpg1734×772 46.1 KB

Password.jpg
Password.jpg1483×691 30.2 KB

I hope this will help you.

Thanks,

Ashok

3

Hi @Bhumireddy,
Thank you for your answer. there was no problem with sending the OTP via email. I received very well the the one time password. But the problem is during the validation of the OTP, and it redirected me to the login page instead of the screen to enter/confirm new password.

The problem is due to the install of E25 Security Vulnerability hotfix, we need to do some steps mentioned in the CAD after the install. This solved the issue.

4

@AmiraF34 The issue happened when a user clicked “Forgot Password” and received an OTP via email. After entering the OTP and clicking the submit button, instead of being taken to the screen to set a new password, the user was redirected back to the login page. The OTP was being received correctly, so the problem was not with email configuration. This issue started after installing the E25 Security Vulnerability hotfix. The fix required additional steps mentioned in the Customer Advisory Document (CAD), which were missed initially. Once those post-installation steps were completed, the issue was resolved and the password reset flow worked correctly again.