title: Azure AD B2C: Force password reset first logon not working (using custom policies)
body: <p>I'm trying to force password reset after the first logon (in Azure ADB2C) using the <em><strong>Custom Policies</strong></em> as explained <a href="https://github.com/azure-ad-b2c/samples/tree/master/policies/force-password-reset-first-logon" rel="nofollow noreferrer">here</a>. I'm able to login and get a proper JWT Token but I didn't manage to let it works. I followed different paths:</p>
  <ol>
  <li>I tried to merge the XML files (taken from the github repo) with the ones taken from &quot;<a href="https://github.com/Azure-Samples/active-directory-b2c-custom-policy-starterpack/tree/master/SocialAndLocalAccounts" rel="nofollow noreferrer">SocialAndLocalAccounts starter pack</a>&quot; (as suggested in the <a href="https://github.com/azure-ad-b2c/samples/blob/master/policies/force-password-reset-first-logon/readme.md" rel="nofollow noreferrer">readme.md</a>)</li>
  <li>I found <a href="https://stackoverflow.com/questions/65337221/custom-policy-for-force-reset-password-on-first-login-not-working">this thread</a> and I tried to apply all the suggested solutions (e.g.: copy-and-paste the XML config file or set <code>forceChangePasswordNextSignIn</code> to <code>true</code>)</li>
  <li>I know that Microsoft created <a href="https://docs.microsoft.com/en-us/azure/active-directory-b2c/force-password-reset?pivots=b2c-custom-policy" rel="nofollow noreferrer">a new scenario</a> which let the user reset his password, but this feature is currently only available for User Flows (and I would like to use the &quot;Custom Policies&quot;).</li>
  <li>I tried to change the <code>extension_00000000000000000000000000000000_mustResetPassword</code> and set it to <code>true</code> (where the zeros are the clientId of the b2c extension app)</li>
  </ol>
  <p>The behaviour that I expect from the procedure is: when a new user log in for the first time, a &quot;change password page&quot; should be displayed and the three fields &quot;Old Password&quot;, &quot;New Password&quot;, &quot;Confirm Password&quot; should be promted.</p>
  <p>At the moment when a new user write the (correct) username and password and login into the service for the first time, no &quot;change password page&quot; is displayed.</p>
  <p>Do you have the same issues? How did you solved it?
  Thanks for your time. Bye</p>