Authenticated users can change their email and password reset secret questions through the OpenAM console.