diff --git a/modules/system.eval.inc b/modules/system.eval.inc
index 32a4a88..d682463 100644
--- a/modules/system.eval.inc
+++ b/modules/system.eval.inc
@@ -175,6 +175,10 @@ class RulesTokenEvaluator extends RulesDataInputEvaluator {
         // We have to key $data with the type token uses for the variable.
         $data = rules_unwrap_data(array($token_type => $state->get($var_name)), array($token_type => $var_info[$var_name]));
         $replacements += token_generate($token_type, $tokens, $data, $options);
+        // Add restricted user tokens (one-time-login-url and cancel-url).
+        if ($token_type == 'user') {
+          user_mail_tokens($replacements, $data, $options);
+        }
       }
       else {
         $replacements += token_generate($var_name, $tokens, array(), $options);