So now that I'm doing FIM, I must do all the new things FIM offers. Before it was just attribute synchronization. Now its web design, workflow, self service password reset to name a few. OK its fun learning new stuff.
Right now I'm dealing with password reset and I've run across a new challenge: what else do you ask besides 'What's your mother's maiden name?' ugg.. so I check my own bank website, it had some good questions. Checking the googlesphere doesn't reveal much. Then one of my colleagues, Tom, mentioned to go to www.goodsecurityquestions.com . This is a great place to get started and understand good from bad questions, it also a some great examples too.