I switched out the reset password to new password component in the edit profile widget, I have enabled Password confirmation and ​Policy preview toggle on as directed, but the user can successfully submit with the passwords not matching , how do I prevent this or why is this allowed?

Hi, I'm Descope's AI assistant. Password Confirmation Validation Issue The password confirmation feature in the new password component shows error messages but doesn't prevent form submission when passwords don't match . This is expected behavior - the component displays validation messages but relies on your flow logic to enforce the validation. Solution Add validation logic in your flow after the password screen: 1. Add a conditional action after your password reset screen 2. Configure the condition to check if passwords match 3. Route users back to the password screen if passwords don't match, or continue if they do The password confirmation toggle only controls the display of error messages when passwords don't match . If the Policy previewer is enabled, the validation message appears only after the password satisfies the policy requirements . Flow Customization You can modify the component flows in your edit profile widget to add custom validation rules . Each widget component has associated flows that handle operations like password changes, which you can customize to add validation logic . Password Component | Descope Documentation Widgets Overview | Descope Documentation

@DevRev what is the confirm password field named, i can see the form.newPassword

I don't have the specific field name for the confirm password field in the documentation. The docs mention that the new password component has password confirmation functionality , but don't specify the exact form field name. Since you can see

form.newPassword

, the confirm password field is likely named something like

form.newPasswordConfirm

,

form.confirmPassword

, or

form.passwordConfirm

. To find the exact field name, check your flow's context in the Descope console - you can inspect the form data being submitted or add a debug action to see all available form fields when the password confirmation is enabled. Password Component | Descope Documentation

@DevRev form.newPasswordConfirm is correct, I have the error set as automatic, but when the password is corrected the widget flow does not continue