A user whose password an administrator has reset with no SMTP configured receives a temporary password. On the first login with it, the system won't let them into the app: it takes them to the change screen and holds them there until a permanent password is set. Only then does the role-specific workspace open.