Change Password Functionality breaks if MFA login is required for user logins. - Known Error

Change Password Functionality breaks if MFA login is required for user logins. Description If MFA login is enabled when doing Change Password if MFA is enabled for logging in, it breaks the change password process. Says the error "The specified old password is not correct."

Steps to Reproduce: - Setup local default password reset on newyork instance - Enable MFA for user. - Login as any non-admin user and setup MFA. - Do change password - See the error: "The specified old password is not correct."

Steps to Reproduce

- Looks like issue with script in "Change Password" subflow. - See the script that is called in step "Authenticate User Password" - it is calling "passwordResetUtil.verifyPassword(inputs,decryptedPassword,outputs);" - This calls the below: var enc = new global.PasswordResetScopedUtil(); var authed = enc.authenticateUser(inputs.user.user_name.getDisplayValue(), password);

- from PasswordResetScopedUtil.authenticateUser() it will return false.

- Turn off MFA for users and this works fine.

Workaround There is no secure workaround.

This issue is fixed along with PRB1372183 in Orlando Patch 1 and Paris release.