User Administration - Passwords

There are several additions I think would be useful from an IT Security/password perspective:

1. The ability to create a one-time use password that forces users to create their own password once they've logged in.

2. The ability to set a password expiry - a 30 to 90 day expiry is becoming fairly common practice and, at this stage, there isn't a good way to implement this in Handle

3. Potentially the ability to force users to sign-in via Microsoft - I've used other platforms where this has been an option.
   
   The plus side is that it then allows us to use Microsoft's 2FA, password expiry rules and one-time use password abilities