Hi @ttylin, and welcome to the Auth0 Community!
The Forgot password link can be disabled for the Universal Login by calling the “PATCH /api/v2/connections/{id}}” Management API endpoint with options.disable_self_service_change_password set to true. Please check out this Knowledge Article for a detailed guide.
I hope this helps you solve the use case!
Sincerely,
Teodor.