how can a user change password in non-SSO for RPM 13.2.6

We're having some difficulty getting our single sign-on environment running. In the meantime, we may have to go live with a non-single sign-on solution. We have a way for users to manage their passwords for RMS (from previous versions of RMS), and SIM is not being implemented yet, so our only difficulty at the moment is RPM. We would like our users to be able to maintain their own passwords. I can see a unix administrator or DBA creaiting the users, at least in the short term. But users should still be able to change their own passwords once the