[Add support for OAuth2 authentication to API]

+1

[Password Reset Portal Allow Users to have multiple authentication options]

In the Self Service Password Reset portal users shouldn't be limited to the verification policies that takes precedence. They should be able to enroll in any that an administrator enables. Then when they go to reset their password they should be asked which method they want to use.