We are attempting to implement a login flow on our community site for the Community Knowledge User profile. The flow works well with the exception of when someone goes to change their password. The new password link is generated properly, but when the user clicks the link they receive in their email to reset their password, they get a notification saying their password has already been changed and it effectively locks them out of the community site. I need to figure out a way to have a user go through the flow with the exception of when they need to reset their password. My understanding is that the "reset pw link" is entering the flow rather than going to the proper "create a new pw" screen. Any suggestions?
Below is an image that was posted in the Success Community as part of this thread in the Community Implementation Group regarding an issue with Self Registration from a Custom Login page. I believe it points the likely culprit of your issue.
What you'll notice is that
forgotPasswordURL isn't prepended with
/community. I believe it should read
"/community/ForgotPassword". That would explain why users can't get to the right location to reset their passwords for your community or site.
In essence, I believe you need to check your site/community login flow and controller to make certain everything is being pointed to the correct pages and that those pages are set up correctly.