on the profile widget password reset flow, I have turned on password confirmation, and the flow will updated the passwords when the don't match and never fires the Password Match Error Message

Hi, I'm Descope's AI assistant. I've put together an initial response below based on your question. Expected Behavior • When Password confirmation is enabled on the

new password

input component: ◦ The Password Match Error Message should display when the two password fields do not match. ◦ If the Policy previewer is also enabled, the match error only shows after the new password satisfies the policy — policy validation takes priority. ◦ The password update action should not proceed until both fields match. What Likely Went Wrong • Passwords updating despite a mismatch and the error never triggering may indicate: ◦ The Password confirmation toggle may not be properly enabled on the

new password

input component inside the Profile Widget's underlying flow. ◦ The Profile Widget's password update flow is a component flow that can be customized. If this flow was modified, the match validation logic may have been inadvertently bypassed. ◦ The Password Match Error Message may be configured but the confirmation field itself isn't wired correctly in the screen, causing the mismatch check to be skipped entirely. Recommended Steps 1. Check the widget's component flow — In the Descope Console, open the Profile Widget, click on the password component, go to the Password confirmation settings, and ensure it is enabled. 2. Review the flow customization — Verify that the password update flow has not been altered in a way that bypasses the validation logic. 3. Test the error message configuration — Ensure that the Password Match Error Message is correctly set up and that the confirmation field is properly linked to the validation logic.

I have done this and it is stll updated mismatched passwords

@Anson Geisel can you share project ID and flow ID?

password reset flow id : F36FnGhWI9AbZEmEeRbNxuV1egyo project id

Managed to reproduce but only in that flow. looking into it

okay let me try ... just a second

see here: https://docs.descope.com/auth-methods/passwords/settings