User clicking "forgot password" in Azure B2C OIDC login results in "access denied"

Our login uses home realm discovery, and then directs users with certain email domains to the Azure B2C login, which is configured as an openID connection. If the user clicks the “forgot password” link, which should redirect to the Azure B2C password reset, the authentication fails and the user is redirected back to the front page.

How do I fix this so that instead of the login failing, auth0 would let the user reset their password?