goto parameter is lost at end of the User Self-Service Forgot Password flow in OpenAM 13.0 and 13.5

Last updated Jan 5, 2021

The purpose of this article is to provide assistance when parameters, including the goto parameter, are lost after completing the User Self-Service Forgot Password (XUI) flow in OpenAM 13.0 and 13.5. This occurs when the user clicks the Return to Login Page link.

Archived

This article has been archived and is no longer maintained by ForgeRock.

Symptoms

The goto parameter that is present in the login URL, for example:

http://host1.example.com:8080/openam/XUI/#login/&goto=http://forgerock.com

is removed after the user resets their password (using the Forgot Password link) and returns to the login page (using the Return to Login Page link).

This behavior can also be seen in SAML 2 federation where the IdP or SP initiated login URL contains parameters; when selecting the Forgot Password link on the IdP, these parameters are also lost at the end of the flow.

Note

The goto parameter is retained if the user remains within the browser throughout the process, however, it is lost once the process leaves the UI. This means the goto parameter is still removed if you have email verification switched on. There is an RFE to ensure the goto parameter is retained when email verification is used: OPENAM-10394 (RFE: Include goto URL in verification email sent during User Registration / Forgot Password flow).