Advanced security is essential in a self-serve password reset tool. By adding phone verification to the multi-factor verification process, you introduce an extra level of security to help ensure the identity of the user requesting the reset.
Password Reset Server automatically calls the registered phone number for that user account and provides a randomized pin code.
The end-user enters the pin code as a part of the reset process.
If the pin code is not entered or is incorrect, then the reset will fail.If the pin code is correct, the end-user will be able to reset their password at the end of the reset process.
Password Reset Server uses two third party phone verification providers that can be used with Secret Server:
Thycotic on Twitter 
Secret Server on Facebook