I am wondering if there is a way to find out who did a password reset. Interestingly the user profile is SSO enabled.
Sub :- "Finish resetting your Salesforce password"
'Salesforce recently received a request to reset the password for the username firstname.lastname@example.org. To finish resetting your password, go to the following link. This link expires in 24 hours"
If you didn't ask for your password to be reset, contact your Salesforce administrator.
Any help would be highly appreciated.