Loading the console
People who can't sign in — wrong PIN or a failed authenticator. Click a row to open their 360, where the reset lives. The wider view (who looked at what, new-device sign-ins) is on Security.
Open anyone in the queue — the reset issues a fresh temporary PIN and clears any authenticator, so it always restores access. Relay the temp PIN to the verified user out of band.
Users who can prove identity recover on their own at sikafon.com/reset-pin — scan the Ghana Card, take a live selfie, set a new PIN. This also clears 2FA.