Configure SMS for self-service password resets

Enable SMS to send users a text message with a password reset code.

  1. In the Admin Console, go to SecurityAuthentication.
  2. Select an existing password policy, click Edit in the right pane, and scroll down to the Account Recovery area.
  3. Select SMS.
  4. Click Update Policy.

Use the Telephony Usage report to monitor the number of SMS messages sent.

New users can postpone providing optional information like a phone number and a secondary email address. Users who don't add this information are prompted to update their profile when they sign in on or after the first day of the following month. They can specify a phone number for SMS messages or choose to be reminded again the following month.

Invalid users who attempt entry through a Forgot Password or Unlock Account action don't see an error message because it could reveal if a username represents a valid account.