
Re-provisions provider credentials for three specific accounts only. No other user, role, or permission is affected.
Each action talks to the real authentication provider. If the identity exists, a reset link is emailed; if it is missing/stranded, a fresh provider credential is created and a one-time temporary password is shown here. The final sign-in at /login is the true login test and is completed by the account owner — it cannot be performed automatically. Temporary passwords are shown once and never logged.