MFA and password recovery
Multi-factor verification, MFA errors and lost devices, and the non-enumerating password reset flow (AU05–AU10, AU15).
All agency users
/pdcc/signin?step=AU05Complete agency verification (AU05)
After the primary sign-in you complete MFA with the method your agency identity policy requires. The provider's MFA screen is the agency's own; the app does not clone or intercept it.
Verification could not finish (AU10)
- Rejected — the code or approval was wrong; retry within the configured limits.
- Timed out — start verification again.
- Rate limited — wait before retrying; throttling rules are preserved.
- Lost device — use an eligible recovery method. Recovery does not grant workspace access or authorize a weaker method, and unavailable alternatives are hidden.
Reset your password
Password reset applies only to app-managed accounts the agency enables. Federated agency passwords are reset with your agency identity provider.
Password recovery
1. Reset your agency password (AU07)
Enter your identifier. The response is the same whether or not an account exists.
2. Check your recovery instructions (AU08)
Confirms the request without disclosing account existence.
3. Open the link
Single-use and expiring; the new password must satisfy the configured policy.
4. Recovery completed (AU15)
Returns you to sign-in and required verification. It does not sign you in or approve access.
Recovery link is no longer valid (AU09)
Expired, reused or invalid links are rejected without consuming another session. Request a new link from the reset page.
Related guides
Sign in to your agency workspace
Choose an agency-configured sign-in route, complete verification, and land in your approved workspace.
Pending access and expired sessions
Why you can be signed in without workspace access, what you can do while assignments are pending, and how saved drafts survive an expired session.