Not OP, but customer identity is a component of my work. Ask users for a recovery email and/or phone number to bootstrap identity if sign in with goes sideways.