300
A user resets his password after receiving an MCS code, making the code invalid. If the user sent in an ID earlier on the ticket, do we need an MFA? And if so, which one?
No MFA needed! Send the MCS code to the user again, as long the ID is within 7 days and in the same thread.