Invited parent-company users should use the reset flow first to set their password.