You can set up the password policy to allow users to reset their own passwords. How this is exposed to the user depends on which application they use to accomplish this task. See Section 4.1, Overview of Password Self-Service for documentation links to the different applications.