Can a user automatically authenticate after password reset?

[tyf]

Hey there @adam.butler welcome to the community!

@adam.butler

We know the user is who they say when they set the password because they followed the link in the email. Is there some way we could just authenticate them automatically? ie. they set their password and we programmatically authenticate them without them having to type it again?

Unfortunately, there isn’t a way to carry out an automatic login following password reset currently but they can be redirected straight to it if you aren’t already doing that. The following thread goes into this in a bit more detail:

Redirect / result_url in change password ticket not working

Hi, I’m struggling with the user redirect after a password reset on the hosted page. It looks as if result_url would be completely ignored. Here’s what I do: I create a password reset ticket (handing over user_id and result_url). All works fine, page opens, password is changed, success message shown. Result_url is 1:1 as in the allowed callback urls of both: Enduser app and M2M app. It always just stays on the the changed password success page. Any hint? Warm regards, Sebastian

I did a quick search in our feedback section and was surprised to not see anything related to this - It might be worth adding it yourself if you’ve got a minute! Our product team monitors these pretty closely for community engagement.