Can Drupal send password reset tokens to email addresses other than the Primary in the linked CiviCRM contact?
If this question veers too far away from CiviCRM, I apologize. This ability might permit resetting passwords for all users in our Active Directory Federated Services/Office 365 environment - a huge benefit!
We are migrating away from a CRM we can't afford. We had a custom web application resetting AD passwords by searching the old CRM's email database and generating a link for the associated user, who could have any number of emails associated. The big problem is that the Primary email is likely issued by us via Office 365 and thus uses the same AD FS credentials that we would like to sync Drupal to. (We have achieved SSO everywhere else and don't want Drupal/CiviCRM to be separate.) Therefore, someone needing a password reset probably can't access his/her Primary email, either.
As the trend is lately, we allow students access to .edu emails after graduation, so we have quite a few random people out there forgetting passwords. A very desirable side effect of using CiviCRM for password resets is that alumni will probably care a lot more about keeping their own contact information up-to-date with us (since access to their .edu email depends on it).
If I can send password reset tokens to any one of a contact's emails, a lot of problems are suddenly solved.