In applications without a sign-up, user accounts are usually created by an admin. This imposes two challenges:
There is a simple solution: create the account with a secret password, then ask the user to use the password reset with his user name.