Starts a forgot username session that looks similar to an MFA authentication session.

post https://example.com/Security/StartForgotUsername

Returns an mfa package with a single challenge (special case 'ForgotUsername' package). The tenant Id is derived from the URL - there is no way to specify it otherwise.