What were you trying to do that didn't work?

• When you try to set your password after it has been reset, you're unable to do so from the web interface if 2FA or external SSO is enabled on the account.

Please provide the package NVR for which bug is seen:

• ipa-server-4.10.2-4.el9_3.1.s390x
• I personally have seen this also on freeipa-server-4.12.1-1.fc40.x86_64

How reproducible:

• Confirmed by customer and by myself with upstream.

Steps to reproduce

1. Create a user, reset their password, and make 2FA an enabled login mechanism.
2. Open the IPA web UI and try to sign in as said user.
3. The user is unable to use their password and cannot reset it.