如何通过Azure AD B2C自定义策略阻止禁用用户重置密码

需求：在PasswordReset用户旅程中添加校验步骤，当用户账户处于禁用状态时，显示“账户已禁用”的错误提示，阻止其继续重置密码。

最初配置未达到预期效果，更新后以下配置已正常运行：

<UserJourney Id="PasswordReset">
    <OrchestrationSteps> 
   
        <OrchestrationStep Order="1" Type="ClaimsExchange">
            <Preconditions>              
                <Precondition Type="ClaimEquals" ExecuteActionsIf="true">
                    <Value>accountEnabled</Value>
                    <Value>false</Value>
                    <Action>SkipThisOrchestrationStep</Action>
                </Precondition>
            </Preconditions>
            <ClaimsExchanges>
                <ClaimsExchange Id="SelfAssertedRegErrorAccountCheck" TechnicalProfileReferenceId="SelfAsserted-Account-Disabled-Error" />
            </ClaimsExchanges>
        </OrchestrationStep>
        
        <OrchestrationStep Order="2" Type="ClaimsExchange">
            <ClaimsExchanges>
                <ClaimsExchange Id="PasswordResetUsingEmailAddressExchange" TechnicalProfileReferenceId="LocalAccountDiscoveryUsingEmailAddress" />
            </ClaimsExchanges>
        </OrchestrationStep>
        <OrchestrationStep Order="3" Type="ClaimsExchange">
            <ClaimsExchanges>
                <ClaimsExchange Id="NewCredentials" TechnicalProfileReferenceId="LocalAccountWritePasswordUsingObjectId" />
            </ClaimsExchanges>
        </OrchestrationStep> 
        
        <OrchestrationStep Order="4" Type="SendClaims" CpimIssuerTechnicalProfileReferenceId="JwtIssuer" />
    </OrchestrationSteps>
    <ClientDefinition ReferenceId="DefaultWeb" />
</UserJourney>

配置生效后效果如下：

内容的提问来源于stack exchange，提问作者Sachin