I am not able to get this working completely. When a user receives the first email, they are directed to a page where they must establish a password. They are able to supply a password. However, the security question drop down is completely empty. I have tried on an environmetn running SPS95 and SPS97.
The user is a member of the role sap.hana.xs.formLogin.profile:ProfileOwner and the security question table is populated.
SELECT * FROM
"HANA_XS_BASE"."sap.hana.xs.selfService.user.db::SECURITY_QUESTIONS"