I've got some users who are already enabled for SSPR, but we'd like to change the verification method from phone-based to question-based. Is there a way to force users to change the method? I see the reconfirmation information option and suppose I could make it 1 day, but I'm impatient!
The users can use any of the methods you've enabled org-wide, provided they have the relevant properties/information fileld in during registration. You cannot control this on the individual user level afaik. But you can switch off a method globally or simply clear off the relevant auth data for the users in question.