We're experiencing an issue where users log into their Filevault2 enabled machine and are being presented with a second login screen. When they try entering their password on the second login screen, the password is then rejected causing the user to be locked out of their computer.
The workaround for this is to log in to another admin account and reset the user's password to the password that works to unlock the disk. This syncs both passwords together and the user is fine after that.
Is anyone else experiencing this behavior? If so, is there an explanation for this? Our machines are running 10.13/10.14 and are not bound to AD.