Your organization wants to implement self-service password reset (SSPR) for its users. The goal is to reduce the number of password-related support calls. What steps would you take to configure SSPR, ensure it is secure, and educate users on how to use it?