1. Forced password change:

After the first login, allowing user to forcefully change their passwords.

2. Username policy needs to be set as email address

Currently, the username consists of letters from First and Last name, now we need to change username to the candidates email address.