If a user contacts you by phone and tells you that you cannot access your corporate email, it will give you an "invalid credentials" error. How would I validate over the phone that the user is entering the correct credentials? What questions would you ask the user? What steps would you tell the user to do?