Ask HN: How does your help desk verify someone before resetting MFA?

Seeing more breaches start with a convincing call to the help desk. Curious what actually works for remote staff and contractors, where nobody can vouch for the caller.