For our client onboarding (B2B2C), they'll bring their own users and won't always have access to password hashes, etc. We're wanting to implement an import process that can broadly support client's data.
Here's what we've thought about to support this:
1. Create their users via core with a temporary password
2. Assign role to users
3. Complete our business logic needed after all users are created
4. Send welcome email + forgot password to the users after business logic is complete
or
5. Send welcome email and within the email, specify that they'll need to manually reset their password
Since they don't directly control the auth system they're currently using, following the docs tutorial of User creation without password hashes wouldn't work for us.