UHF-9514: More documentation

modules/helfi_tfa/README.md

@@ -8,6 +8,16 @@ Provides default configuration for TFA module.
 2. Add a new secret called `TFA-ENCRYPTION-KEY` to Azure KeyVault and copy the key as value
 3. Enable `helfi_tfa` module
 
+## Reset TFA settings for other users
+
+At the moment, users logging-in using Tunnistamo cannot reset/disable TFA for other users due to password requirements.
+
+You can use Drush to reset TFA settings until this is fixed:
+
+```bash
+drush tfa:reset-user --uid xyz
+```
+
 ## Exclude roles
 
 Go to Configuration -> TFA Settings (`/admin/config/people/tfa`) and uncheck the role from `Roles required to set up TFA` and save the form.