Password reset requests create expiring application identity tokens. Email delivery remains deferred until the platform mail service is activated.