10. Maintain Credential - Reset

When an employee or contractor forgets the shared secret associated with their credential, usually a password or PIN, they can request a reset. This prevents them from having to request a new credential.

---

Pre-condition: An employee has an active, agency-issued credential.

	The individual forgets their password or PIN. They contact their credential manager for a reset.
	The credential manager verifies the requestor’s identity. The verification method will vary by agency.
	The credential manager issues a reset. For example, this could be a temporary password or a security link to a web-based reset form.
	The individual resets their password or PIN.

Post-condition: Shared secret is reset and the credential is again ready for use.

Click here for a consolidated image of this use case.