Customer would like to force a password reset on initial login for a new external contact or employee.
During record creation you can use the "TempInternalAuthPassword" field instead of "InternalAuthPassword" to set the initial account password.
Setting the password in this way will result in the user getting a forced password change upon first login. Thereafter the new password they choose will be set in "InternalAuthPassword" and "TempInternalAuthPassword" will be cleared out. This will establish normal operation of the account.