Hi,
Any suggestion for dealing with link checkers (safe links, mimecast) and password reset flow (without MFA)? We have a few users causing a lot of noise as clicking on the password reset link is showing them expired or invalid code? Email verification is working fine for them via the Confirmation required page however the password reset emails are causing the issue here..
We have checked and confirmed that

• They are clicking on the latest email (in case of multiple emails).
• They are using safe links or mimecast
• Link expiry is set to 1day and this is happening within a few minutes of email delivery.

Changing their organisation IT settings is not an option so we are having to manually reset their passwords which is not ideal.

Thanks.
Maaz