I'm fairly certain this is not possible but thought i'd ask. I want to do a on change workflow that will only allow the change if the person making the change has confirmed the person's ID.
Since this is password reset, the only way I can think to do this is for them to first put a value in another attribute which says they were verified and save it. Then they can perform the reset and my workflow would look to see if they did the confirmation. If they didn't, it would stop the workflow before the actual reset and clear the verified field to be used again next time. Ideally if they could reset and be prompted for an answer confirming verification that would be ideal.