Self-service Password Reset
When you request to turn on forms authentication, the Self-service password reset task appears under Configuration. You can configure this task to provide a way for users to change passwords.
Note: Forms authentication includes other login enhancements such as invalid login messages to help clarify how to successfully log in to the application. To request to turn on forms authentication, create a case on Case Central.
When you select Self-service password reset, the Edit self-service password reset options screen appears. Select Enable self-service password reset so users can change passwords. If you have your own website for users to change passwords, enter the URL for that site in the Custom password reset URL field. Otherwise, leave this blank.
When you select Enable self-service password reset, an Update your email address screen appears the next time a user logs in to your application.
When a user clicks Forgot your user name or password on the login screen, an email sends to the email address that includes the user name and a link to reset the password. When the user clicks the link, a screen appears to enter a new password and confirm it. By default, the link expires after the user clicks it or after 24 hours. To adjust this time, edit the SelfServicePasswordResetUrlValidHours key in the web.config file.
Tip: To change the email address for the user, select the user name at the top of the page. From the menu that appears, select Update email address. You cannot associate an email address with more than one user.