<div dir="ltr">Yep, the result to the user is the same regardless if a user with the email exist. Same with the login screen it display invalid username or password, not just invalid username.</div><div class="gmail_extra"><br><div class="gmail_quote">On 24 May 2016 at 14:36, Thomas Raehalme <span dir="ltr"><<a href="mailto:thomas.raehalme@aitiofinland.com" target="_blank">thomas.raehalme@aitiofinland.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi!<div><br></div><div>For security reasons I don't think Keycloak should reveal whether or not the account exists. Instead the message shown to the user in response should be something like "If the email address was found, you should soon receive further instructions."</div><div><br></div><div>Best regards,</div><div>Thomas</div><div><br><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Tue, May 24, 2016 at 3:02 PM, Jayapriya Atheesan <span dir="ltr"><<a href="mailto:jayapriya.atheesan@gmail.com" target="_blank">jayapriya.atheesan@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">Hi All,<div><br></div><div>Any help would be appreciated.</div><div><br></div><div>Thanks,</div><div>Jayapriya Atheesan</div></div><div class="gmail_extra"><div><div><br><div class="gmail_quote">On Mon, May 23, 2016 at 12:10 PM, JAYAPRIYA ATHEESAN <span dir="ltr"><<a href="mailto:jayapriya.atheesan@gmail.com" target="_blank">jayapriya.atheesan@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal">Hi,<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">When a user clicks on reset password/forget password and enters an email id which is not registered with keycloak, it does not show any error. <u></u><u></u></p><p class="MsoNormal">Is there any option to give an error message to the user saying “email id doesn’t exist”.<u></u><u></u></p><p class="MsoNormal">Note : We are using keycloak 1.6.0Final. <u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Thanks,<u></u><u></u></p><p class="MsoNormal"><span style="font-size:12.0pt">Jayapriya Atheesan</span><u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p></div></div></blockquote></div><br><br clear="all"><div><br></div></div></div><span><font color="#888888">-- <br><div><div><strong><font size="2">Regards,</font></strong></div><div><font size="2">Jayapriya Atheesan</font></div></div>
</font></span></div>
<br></div></div>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br><br>
</div></div></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>