To be frank: the company im working for as an external already does this. this is the flow: 1. I call the hotline and give them my username 2. They ask me an security question, if set in an special portal(i can set any question as long the answer is long enoigh and can be spoken) 3. they contact the manager if the question was not set. He gets an word that acts like the answer for the security question.