Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
B2C Tenant Password reset email issue
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 48%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKK%3C/text%3E%3C/svg%3E)
Kumar Krishnamoorthy
1
Reputation point
When we use the Self-service password reset in our Azure B2C tenants, it triggers the password reset verification email.
But the emails are not getting received. We tried with multiple email addresses from different domains and none of them work. This was in an existing B2C tenant, which we know was working well a month ago for the same email addresses with no changes to the policies in between.
Tried with other B2C tenants as well and it seems to be same effect. No verification code emails.
What else could we be missing?
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 10%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Shubham Sharma 16,640 Reputation points Microsoft External Staff Moderator2026-06-05T02:08:50.7266667+00:00 Hey Kumar, it sounds like your B2C password-reset flows are firing off fine, but the verification emails just never land. Since you’ve already verified there were no policy changes and it worked a month ago across tenants, this points to an email-delivery issue on the B2C side. Here’s what you can do:
- Check Azure Service Health • Head into the Azure portal > Service Health and see if there are any active incidents or advisories for “Azure AD B2C Self-Service Password Reset email” in your region. Microsoft recently changed the backend email provider and there have been transient service hiccups.
- Verify user-flow configuration • In Azure AD B2C > User flows > select your sign-in or sign-up/sign-in flow – Under Properties > Password configuration, ensure Self-service password reset is Enabled – Under Page layouts, pick version 2.1.3 or later and save
- Troubleshoot delivery end-to-end • Turn on diagnostic logging for your B2C tenant (Azure Monitor > Diagnostic settings) • Run a Kusto query against the logs to spot any failed SendEmail operations (category “EmailVerification” or similar) • If you can capture an email header (for any emails that do arrive), paste it into an MXToolBox or similar service to see where it’s being dropped or marked as spam
- Whitelist Microsoft’s B2C email domains • By default, B2C sends from a Microsoft-managed domain that may be blocked by some mail filters. Ask your recipients’ mail admins to allow the B2C email sender domain, or check their spam/quarantine.
- Consider a custom email provider for guaranteed delivery • If you need full control over SPF/DKIM and throttling, configure SendGrid, Mailjet, etc. in your tenant. That way you manage the sending domain, and you can track delivery natively.
Hope this gets your password-reset emails flowing again!
References:
Sign in to comment
Sign in to answer