You are probably caught in a catch-22; many such HR systems didn’t used to require security questions to make resetting passwords easy. Then, of course with modern data breaches the companies over time added in the requirement. The problem being when they added the security question requirement, they didn’t do the critical piece of requiring all current users to update/create security questions so any login attempt outside SSO and you’re screwed. Someone else’s problem boss!