Well, you can always factory reset it, then she'd need to sign in with her account, properly sign out and then reset it to prevent factory reset protection from kicking in. Alternatively - if she had a Samsung account on the device she could sign in to that and use the device locator functions to reset the login features.
If there was a magic way to get through the password it wouldn't be a very good security measure, would it?