title: Azure AD B2C doesn't check if email exists
body: <p>I've an Azure AD B2C setup that no matter which email I insert in forgot password email's field it will send the verification code email to that email.</p>
  
  <p>Even if the email doesn't exists in the Users list.</p>
  
  <p>Is this the default behavior?</p>
  
  <p><a href="https://[tenant].b2clogin.com/[tenant].onmicrosoft.com/oauth2/v2.0/authorize?p=B2C_1_SSPR&amp;client_id=[clientId]&amp;nonce=defaultNonce&amp;redirect_uri=[redirectUrl]&amp;scope=openid%20offline_access&amp;response_type=code&amp;prompt=login&amp;response_mode=query" rel="nofollow noreferrer">This is the link I have for recover password</a></p>
  
  <p>Is there any missing property in the url that force check if the email exists in User list ?</p>