...
Users can reset their password in the UI by clicking on the Forgot your password? link.
You can configure the link address in the Configuration View, but if you do not wish to allow the user to reset their password, you should edit the client-config-custom.json file and set the client password recovery property to false.
...
For more details, see Configuration view#Security
...
Create a user
When you create a user, on the Advanced tab you can select an option to ensure they reset their password on login.
...
A user that is locked out for too many failed login attempts is marked as Suspended in Users view in both the list view and the card view.
...
The administrator can edit the user and manually activate the account, or the user can wait for the lockout period to end.
...