"Tenant must be specified" error on password reset attempts

Problem statement

When attempting to reset the password, we are receiving the following error:

{"name":"BadRequestError","code":"missing_property","description":"tenant must be specified","statusCode":400}


All attempts to reset passwords fail with the error “Tenant must be specified”


  • Using Classic Universal Login with a Custom Password Reset page
  • Network traffic showed a request to the /lo/reset endpoint, though it was using a different domain than either the canonical or custom domain configured on the tenant
  • JS script tag within the custom password reset template showing hard-coded url “https://www.NOT_AUTH0_DOMAIN.com/lo/reset"


in the Custom Password Reset template, the URL has the wrong domain when making the password reset request.


You need to update the password reset URL to use the correct domain configured on the tenant.

1 Like