Every time an employee tries to log in, they are asked to change their password. Why?

This is most likely because the employee is attempting to log in with the wrong username. Double-check their username by searching for the user in Simployer. Scroll all the way down on the user’s profile and check the username registered under "Account Information".
Also, ask the employee to make sure they are entering the same username when logging in.