When logging into a wiki for the first time, using a SUL enabled and merged username, if the user first requests that the system email them a new password (for instance, if they don't remember and have been using "remember me" features on our other wikis), the system does not check the global user list to find out if they exist globally, and so tells them they are not a valid user.

Version: unspecified
Severity: minor