Clear a User's On-Demand Authentication PIN

You might clear a user's on-demand authentication (ODA) PIN when the PIN is compromised, forgotten, or when your organization has a policy that requires the PIN change. You must always set a temporary PIN when you clear a user's PIN because ODA requires a PIN.

The user must change a temporary PIN the first time it is used.

Procedure 

1. In the Security Console, click Identity > Users > Manage Existing.

2. Use the search fields to find the user for whom you want to set a temporary PIN.

3. Click the user.

4. From the context menu, select SecurID Tokens.

5. Under On-Demand Authentication, for Associated Pin, select Clear existing PIN and set a temporary PIN for the user.

6. Enter a temporary PIN.

7. Click Save.

8. Securely communicate the temporary PIN to the user.