My company is starting a new project which has design requirements allowing our users to sign-up to save their progress with only a username and password. No Personal Identifiable Information is allowed via our contract. I am just trying to think of the best way to do this and how to overcome some of the challenges like, what happens when a user forgets their username or password?
Ideally it would be much nicer to use an email as their unique identifier but that is PII and isn’t allowed unfortunately. Has anyone else ever designed anything like this?