We are planning to implement NETIQ SSPR. Most interested in the forgotten password module; the users beeing able to reset passwords by themselfs.
But we are not fond of challenge-response questions.
Is it possible to disable all the challenge-response questions? Only use OTP (one-time password) by SMS instead?

Thanks in advance,