+ Start a Discussion
naveen reddy 19naveen reddy 19 

How to validate username while user clicks reset password in partner community

Hi All,

We have a partner community and when user enters invalid username for password reset, its still taking. 
When users enter invalid username and submit a password reset, they are given a message telling them that they will be receiving an email with a link to reset their password.  Of course, they never receive an email because of the invalid username.

How to check password reset for only valid username for partner community.

User-added image

User-added image

Thanks,
Naveen
MKRMKR
Hi,

Generally it is better to not leak usernames with password reset functionality.That would allow other users to check if particular user exists or not. I'd suggest that you modify it so that it informs that "If your username was found in the system, we have sent instructions on resetting your password to the associated email address."

This is how large majority of popular services work currently.

Regards,
Mkr