update for identity recovery doc

docs/security/credentials/identity-recovery/index.adoc

@@ -292,6 +292,33 @@ correlator which is expected to be used by the Correlation module, has to define
 </objectTemplate>
 ----
 
+== _Found identities_ step description
+
+The last step of the Identity recovery flow - _Found identities_ - contains some possibilities which can
+lead a user to further flows.
+No matter, if any identity was found or not, the user can restart the flow again with the help of
+`Restart the flow` button.
+
+.Restart the flow button.
+image::restart-flow-button.png[Restart the flow button, width=200]
+
+If user finds among the found identities the one he needs, they can confirm the identity. In this case
+they are redirected to the Login page with the prefilled Username field.
+
+.Confirm my identity button.
+image::confirm-my-identity.png[Confirm my identity button, width=200]
+
+_Found identities_ step can also contain a link to the self registration page in case registration flow
+is configured in the security policy. The data which were entered by the user during Identity recovery flow will
+be used then to prefill self registration form. If self registration flow is configured in the default security
+policy, the link to the registration page will be visible for all types of users. There is also a possibility
+to configure self registration flow only for the specified user's group, for that self registration
+flow should be configured within archetype security policy (security policy referenced from the
+archetype). Please, mention that in case self registration flow is configured within archetype
+security policy, authentication sequence and authentication modules used by self registration flow
+should be defined in the global (default) security policy due to the current implementation. More information
+about self registration flow configuration you can find by the xref:/midpoint/reference/misc/self-registration/[link].
+
 == Identity recovery flow example
 - User opens Login page. _Recover your identity_ link is present. Note that link text is configurable, therefore
 it can be different.