Custom WI Entry using managed code?

Think long and hard about whether you really need to do this.

There is a strong risk that the next time a version upgrade comes along, it will stomp on what you have implemented.  That or you will be stuck at the AR version you are currently at.

Feel free to share your use case to see if there's a more "supportable" way to achieve what you need.

The use case is to generate a random confirmation code that is sent via SMS to the end user to verify their identity before changing a password.

I would suggest creating a custom user object menu command that opens a form to edit a virtual attribute that will contain your code.

You can use an OnGet event handler policy script to generate the code and send it to the user st the time the form.opens.   I would also set a custom control on the new form identifying it (example:  myformname=codeform) so that your script would look for this control and only respond to events coming from that form

Hope this makes sense.

Also, be aware that One Identity has a Password Self Service product that can be added as a link in the ARS user self service portal, but can also be added as a "Forgot my Password" button at the login screen.  This would not only support verifying the user identity via randomized pincode, but also things like security questions, and/or multifactor authentication via RADIUS.  Just something to think about.