If they are truly added, they should be able to click the "Forgot password?" link to get the server to send them a password reset email.
Have you checked to make sure their email addresses are appearing in the appropriate group in you project permissions?
--Brendan