When designing a password reset process:
Is an email address or an assigned username a valid piece of information (identifier) to ask for in two factor authentication?
How does two factor authentication work for password resets in general? wouldn't asking more information from the user be an overkill when they have already forgotten their password?
Is sending a reset code via mobile coupled with a unique identifier qualify as two factor authentication?