A user password is required for SSH connections to the CMS server. As described in Changing a user's password through the command line interface, you can use the command line interface to force the user to change their password the next time they log in.