Skip to main content
Kgastaldo
Helper ⭐️⭐️⭐️
Feb 24, 2021 5:47 PM UTC
Solved

Token Invalid Password Reset

I’ve had 3 members this week tell me they get “token invalid” when trying to reset their password. Why would that error occur when they are going immediately to reset it?

    tom.shaddock
    Gainsight Employee ⭐️⭐️
    Feb 25, 2021 8:33 AM UTC

    Hey @Kgastaldo so this sounds like there’s some security software on these users’ inboxes thats stripping the ?token= parameter from the url bar. For example I do know that customers have reported that security software by Mimecast has been known to cause this issue - i’d advise you ask these users to contact their IT department to see if they’re able to put in a whitelist for the email notifications coming from your community? It seems that some security software doesn’t like the fact the platform submits this ?token=  in the url as it thinks it’s either some form of attack or a vulnerability (when in fact it’s neither).

    6 replies

    tom.shaddock
    Gainsight Employee ⭐️⭐️
    Feb 25, 2021 8:33 AM UTC

    Hey @Kgastaldo so this sounds like there’s some security software on these users’ inboxes thats stripping the ?token= parameter from the url bar. For example I do know that customers have reported that security software by Mimecast has been known to cause this issue - i’d advise you ask these users to contact their IT department to see if they’re able to put in a whitelist for the email notifications coming from your community? It seems that some security software doesn’t like the fact the platform submits this ?token=  in the url as it thinks it’s either some form of attack or a vulnerability (when in fact it’s neither).

    Translate
    Kgastaldo
    KgastaldoAuthor
    Helper ⭐️⭐️⭐️
    Feb 25, 2021 3:56 PM UTC

    I’ll pass that along, thank you!

    Translate
    Daniele Cmty
    Helper ⭐️⭐️
    May 17, 2021 2:19 PM UTC

    Hi, are there any updates on this? 

    @Kgastaldo did that turn out to be the right solution? 😊

    Translate
    Kgastaldo
    KgastaldoAuthor
    Helper ⭐️⭐️⭐️
    May 17, 2021 3:34 PM UTC

    I’ve suggested this to users, but mostly I’ve just been changing their password in the mod console and having them update it after they’ve logged in. Not the prettiest solution, but going fine!

    Translate
    Daniele Cmty
    Helper ⭐️⭐️
    May 17, 2021 4:09 PM UTC

    That’s a much quicker solution!
    I think it’s a bit prettier than having to contact the IT department 😬
    Thanks ! I’m having the same issue with a user and I’ll do it like that.

    Translate
    Kgastaldo
    KgastaldoAuthor
    Helper ⭐️⭐️⭐️
    May 17, 2021 4:27 PM UTC

    Yep - I get the impression they don’t bother to talk to their IT a lot of the time. Once they’re back in the community, they can just change the password from their profile. 

    Translate