You might clear a user's on-demand authentication (ODA) PIN when the PIN is compromised, forgotten, or when your organizationhas a policy that requires the PIN change. You must always set a temporary PIN when you clear a user's PIN because ODA requires a PIN.
The user must change a temporary PIN the first time it is used.
In the Security Console, go to the Home page.
Use Quick Search to find the user.
Select the user you whose ODA PIN you need to clear.
Under On-Demand Authentication (ODA), click Manage.
In Associated PIN, select Clear existing PIN and set temporary PIN for the user.