user credentials

SUMMARY.adoc

@@ -16,11 +16,12 @@
  .. link:topics/realms/keys.adoc[Realm Key Pairs]
  .. link:topics/realms/cache.adoc[Clearing Server Caches]
  .. link:topics/realms/email.adoc[Email Settings]
- .. link:topics/realms/themes.adoc[Themes]
+ .. link:topics/realms/themes.adoc[Themes and Internationalization]
  . link:topics/users.adoc[User Management]
  .. link:topics/users/viewing.adoc[Viewing Users]
  .. link:topics/users/create-user.adoc[Creating New Users]
  .. link:topics/users/attributes.adoc[User Attributes]
+ .. link:topics/users/credentials.adoc[Credentials]
  . link:topics/admin-permissions.adoc[Master Admin Access Control]
  . link:topics/per-realm-admin-permissions.adoc[Per Realm Admin Access Control]
  . link:topics/client-registration.adoc[Client Registration]

topics/realms/themes.adoc

@@ -1,5 +1,5 @@
 
-=== Themes
+=== Themes and Internationalization
 
 Themes allow you to change the look and feel of any UI in {{book.project.name}}.  Themes are configured per realm.  To change
 a theme go to the `Realm Settings` left menu item and click on the `Themes` tab.
@@ -21,4 +21,12 @@ Email Theme::
 
 
 
-The link:{{book.developerguide.link}}[{{book.developerguide.name}}] goes into how to create a new themes or modify existing ones.
+The link:{{book.developerguide.link}}[{{book.developerguide.name}}] goes into how to create a new themes or modify existing ones.
+
+==== Internationalization
+
+Every UI screen is internationalized in {{book.project.name}}.  The default language is english, but if you turn on the
+`Internationalization` switch on the `Theme` tab you can choose which locales you want to support and what the default locale
+will be.  The next time a user logs in, they will be able to choose a language on the login page to use for the login screens,
+User Account Management UI, and Admin Console.  The link:{{book.developerguide.link}}[{{book.developerguide.name}}] explains
+how you can offer additional languages.

topics/users/attributes.adoc

@@ -2,7 +2,7 @@
 === User Attributes
 
 Beyond basic user metadata like name and email, you can store arbitrary user attributes.  Choose a user to manage
-then click on the `Attributes` tab.
+then click on their `Attributes` tab.
 
 .Users
 image:../../{{book.images}}/user-attributes.png[]

topics/users/credentials.adoc

@@ -0,0 +1,29 @@
+
+
+== User Credentials
+
+When viewing a user if you go to the `Credentials` tab you can manage a user's credentials.
+
+.Credential Management
+image:../../{{book.images}}/user-credentials.png[]
+
+=== Changing Passwords
+
+To change a user's password, type in a new one.  A `Reset Password` button will show up that you click after you've typed everything in.
+If the `Temporary` switch is on, this new password can only be used once and the user will be asked to change their password after they have
+logged in.
+
+Alternatively, if you have <<fake/../../realms/email.adoc#_email, email>> set up, you can send an email to the user that asks
+them to reset their password.  Choose `Update Password` from the `Reset Actions` list box and click the `Reset Actions Email`.
+The sent email contains a link that will bring the user to the update password screen.
+
+=== Changing OTPs
+
+You cannot configure One-Time Passwords for a specific user within the Admin Console.  This is the responsibility of the user.
+If the user has lost their OTP generator all you can do is disable OTP for them on the `Credentials` tab.
+If OTP is optional in your realm, the user will have to go to the User Account Management service to re-configure a new
+OTP generator. If OTP is required, then the user will be asked to re-configure a new OTP generator when they log in.
+
+Like passwords, you can alternatively send an email to the user that will ask them to reset their OTP generator.  Choose
+`Configure OTP` in the `Reset Actions` list box and click the `Rest Actions Email`.  The sent email
+contains a link that will bring the user to the OTP setup screen.