When accessing the new password definition screen while logged in, you may not see the option to define or re-define the Security Question and Answer required for the use of the self-service password reset service. The fields required will not show in the interface below the ability to define a new password with confirmation.
All Editions
A System Administrator can resolve this by updating the user's Profile or Permission Set assignments directly in Setup.
Review Salesforce documentation on Profiles, Permission Sets, and the Password Never Expires system permission before making changes in Setup.
This is the result of the Password Never Expires system permission being assigned within the assigned Profile or Permission Sets for the impacted user.
To resolve this, a System Administrator must:
Navigate to the user's Profile or Permission Sets in Setup
Locate the Password Never Expires system permission
Remove this permission from the Profile, or remove the Permission Set assignment from the user
Have the user log in again to set their Security Question and Answer
Once the permission has been removed, the affected user must log in again and set their Security Question and Answer. This is required before self-service password resets will be available to that user.
000395512

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.