we have Azure as Auth Provider for our community users. For some reason whenever Auth flow is interrupted in Azure, SF masks result in callback call and error_description is removed. Because of this, we are unable to differentiate between clicks on Forgotten Password or Cancel.
When user clicks on any of these buttons, Azure redirects user to correct callback URL with proper params:
error_description (code) is specific for the action.
When authcallback handles request and determines that it is an error, it redirects this request to error handler. But error_description is not longer available. it is masked with same dummy value regardless of original response:
Is there some way to stop SF from masking this information?
Or are we doing something wrong?