In CUBA.platform, it was possible, when performing a password reset, not to generate a new one, but to force the user to change it when trying to log in.
There is need to get this ability in jmix