Have you got a ‘reset password’ action in the workflow?