I connect to the VPN of another company with a company-specific username and password (they aren't giving everyone the same password to every company to access it or anything ridiculous like that.) After one of our employees left, I contacted this company about updating our password. I was told they are unable to change passwords and can only issue new usernames. Doing this would mean about two months of being unable to use their system due to paperwork and bureaucracy, so obviously quite an inconvenience.
Is there any reason besides poor design that their system would not be able to accommodate a password change? Passwords are also recoverable. This is a large company and there are probably a few hundred companies using this system, and as it is government-related there are no alternatives.