We've been using Self Service Plus for years now and are considering how to open it up for external users (not necessarily ona  VPN, public access). Are there any KB articles we can reference? I've had a look through and can't find anything.

Our problem is we have external vendor support users who have accounts in our system, but still need to reset passwords every x days. 

1) Is opening this application (via a reverse proxy or the like) something that is supported or recommended?

2) Are there any recommendations for securely opening it up, eg port numbers etc?