New Password Reset Flow - External

1

I want to implement a password reset flow, within a website external to Keycloak, the user clicks on reset password, enters his/her email and receives a link to that same website (not Keycloak) with a token and a form to reset the password, after filling out the form, use this token to send it to the Keycloak API.

If anyone has already done something similar, or has supporting documentation to pass on to me, it would help me a lot!

2

Why would you want to do that? One of the main security features of oidc/saml is that the user never enters credentials ( which includes during password reset) on anything outside the idm provider (==keycloak). Your flow just adds one more point to intercept the user credentials. So unless you want to capture user credentials, I don’t see a valid usecase.

1 Like