...
By default, after a user has initiated password reset by entering their login name, they are asked to enter their OTP only if the account exists. This behavior can be changed so that the OTP is asked in any case by setting the following configuration string in the password method (SSO Management Console → Global Method Setting → Password.x). Note that this parameter affects only password reset and will not have effect on any other SSO UI screen or API call.
...