My supervisor is asking if there is another way for people to recover their password if they didn't fill in the security questions. Currently, if they haven't set it up, we have a form that they fill in and request their password. Then I go and send it to them.

My supervisor is wondering if it can be automatic through you. Just one click and they are sent a link to change their password.

We have a problem with people setting their security questions. Then they forget their password and ask us for it.

My suggestion would be to make answering security questions part of logging in for the first time. In other words, they sign in for the first time, change their password and then setup their security questions.