We have a system where an employer will register a user to our system. Employer has the persons name, and email address. The system creates a new account and an email is sent to the new user with a username, a randomly generated password and link to our site.
The user logs in with credidentials and is imediataly prompted to change their password before the can continue.
What is a better way to perform this process that doesn't involve sending temporary passwords in email?