As a developer focused on security I want to ensure that individuals requesting passwords resets are current users in our directory before allowing them to reset their account to ensure we maintain our security.

[csorbell]

60

AC: The password request should be confirmed with the user directory before progressing any further in the password reset journey.