You might clear a user's on-demand authentication (ODA) PIN when the PIN is compromised, forgotten, or when your organization has a policy that requires the PIN change. You must always set a temporary PIN when you clear a user's PIN because ODA requires a PIN.
The user must change a temporary PIN the first time it is used.
In the Security Console, click Identity > Users > Manage Existing.
Use the search fields to find the user for whom you want to set a temporary PIN.
Click the user.
From the context menu, select SecurID Tokens.
Under On-Demand Authentication, for Associated Pin, select Clear existing PIN and set a temporary PIN for the user.
Enter a temporary PIN.
Securely communicate the temporary PIN to the user.