Hi,
Question: If all you're doing is sending an email, why build a workflow?
As an aside, I think this approach is dangerous. If a user leaves their screen unlocked, a workmate could now easily get access to any of their SAP accounts (via the new emailed password) and wreak havoc.
There is also the issue of the new passwords being readable / intercepted via SOST.
The whole reason that accounts become locked is as a precaution against break-ins. I think you will be (inadvertently) degrading that safety mechanism.
cheers
Paul