Allow temporary password use for system logons with an immediate change to a permanent password.

Temporary passwords often follow a consistent style (e.g. ChangeMe2020!), this means that they can be more easily guessed by an attacker. If users are forced to change their password upon receiving a temporary one you can reduce this risk. For added security you can provide employees with a randomly generated password when they request a reset.

When providing a temporary password to a user set their account to require a password reset upon login. An example of when this will need to be done is when providing a password to a new employee or when an employee requests a password reset.