Password changing for off-site users

Trying to configure my users to be able to change their passwords from the cloud. I don't want to open up the entire organization to being able to reset on the cloud, just  the remote users that will...