Modify "Reset Password" on the Account page to redirect to Third Party Auth (Keycloak) password reset

Hello, we are running on Sumac with Tutor version 19.0.3, using the tutor mfe and keycloak plugins alongside a customized Indigo plugin.

The default account creation and login is completely disabled, everything is going through Keycloak.

On the account page example.openedx.com/account (which from my understanding is being served by the account mfe), there is a “Password” section with a Reset Password button. This button currently sends an email to the user with a link to reset the OpenEdx account password, which in our case does nothing from the user’s perspective.

These are the 2 main approaches we explored that could fix this:

  1. Modify the “Reset Password” button to directly redirect to the keycloak password reset URL for the user. (no email)

  2. Modify the token send in the email to redirect to the keycloak password reset.

Ideally we would like to do this through a plugin or patch and are explicitly trying not to maintain local or forked repositories.

Having explored a little bit of MFE patching using Plugin Slots (hiding the help button on the learning MFE), we are wondering if a similar plugin/patch based approach is possible for this change or if there is a simple way to change the behavior here.

Has anyone achieved a similar override (replace Reset Password button with a direct SSO flow) via slot, patch, or static overlay, with Sumac or similar Tutor/MFE versions?

Hi @KennyDYann and welcome to the community!

I don’t see any plugin slots for AuthN: frontend-app-authn/src at master · openedx/frontend-app-authn · GitHub (normally they’re in the src/plugin-slots directory as in frontend-app-learning/src/plugin-slots at master · openedx/frontend-app-learning · GitHub)

We are open-source so if you develop a plugin slot that works for you please do consider contributing it upstream!