Looks like via consulting work there is support to implement a flow to change an expiring password (Active Directory). Would such a change password flow be considered for inclusion in the IdP ? Or is that out of scope ? Of course it could just be packaged as a contribution/extension. I should probably also ask if anyone has done such a flow already. Tom