Clear a User's On-Demand Authentication PIN

You might clear a user's on-demand authentication (ODA) PIN when the PIN is compromised, forgotten, or when your organization has a policy that requires the PIN change. You must always set a temporary PIN when you clear a user's PIN because ODA requires a PIN.

The user must change a temporary PIN the first time it is used.


  1. In the Security Console, click Identity > Users > Manage Existing.

  2. Use the search fields to find the user for whom you want to set a temporary PIN.

  3. Click the user.

  4. From the context menu, select SecurID Tokens.

  5. Under On-Demand Authentication, for Associated Pin, select Clear existing PIN and set a temporary PIN for the user.

  6. Enter a temporary PIN.

  7. Click Save.

  8. Securely communicate the temporary PIN to the user.

Related Concepts

On-Demand Authentication