Powerhouse Web Security

[Hodson, Paul EDUC:EX]

We are looking at user authentication for our powerhouse web environment.   We are currently using a table with ID's and Passwords but the management falls to IT. Would prefer that we use our clients as the point of contact and a more robust approach - more web like using question reminders and self-serve password resets.
 
Any insight? Suggestion?
 
Thanks,
Paul Hodson