Password reset - Ask user custom question to re-initiate password
It's could be interesting to allow user to re-initiate his password with other method then email. In our setup when user doesn't remember his password, he could not access is email, cause is under the same sso. So he can't logon.
Maybe, if he could customize 5 questions/answer and be prompted to respond 3 of those to allow reinitiate password.
Those question could be also prompted as a 2n factor question to allow login.Question rotate on granted login.