Overview
Use AccessGuard recovery/reset endpoints with secure recovery state, verification delivery, password policy, session handling, and security notifications.
Problem
Each application needs a safe recovery flow without exposing whether an account exists or duplicating password-reset logic.
Solution
Centralize recovery in AccessGuard and deliver the reset journey through the configured email/messaging channel policy.
How it works
Recovery requests are rate/policy controlled, reset state is stored in AccessGuard, password changes are applied to the authoritative account, and related sessions/security notifications can be handled from the same identity service.
Who is this for
Application Engineer
Identity Administrator
Expected outcomes
- One recovery policy across connected applications
- Auditable recovery and password-change state
Key metrics
Security impact
- Account identifier, reset state, password credential state, security events and delivery metadata · PII: yes
Compliance
- Anti-enumeration response behavior, credential protection, recovery expiry/policy, and audit events
Availability & next steps
Starter
Pro
Enterprise