In your m2ee.yaml file, you are likely missing a setting: ApplicationRootURL
mxruntime:
# Application root URL will be used when generating wsdl documentation on the
# fly at /ws-doc/
ApplicationRootUrl: https://example.mendix.com/
The Java action is looking for the value of this key to build the correct password reset URL.