Many valid use cases

Self-service and enrollment basically mean that a user signs in with one authentication factor before updating another:

Use case:

Login with:

To do this:

Password synch

  • Current password.

  • Choose a new password.

Self-service

  • Security questions.
  • Smart card or token.
  • Cell phone (random PIN via SMS).
  • Biometric.

  • Choose a new password.
  • Reset token PIN.
  • Reset smart card PIN. HDD key recovery.

Enrollment

  • Current password.
  • Smart card or token.

  • Fill in security questions.
  • Provide voice print.
  • Register cell phone.