Change password flow ?

[Cantor, Scott]

> Looks like via consulting work there is support to implement a flow to change
> an expiring password (Active Directory).
> 
> Would such a change password flow be considered for inclusion in the IdP ? Or
> is that out of scope ?

We've historically treated it as out of scope but I know it comes up a lot as an interceptor issue.

I would probably only be interested in it if we had it suitably abstracted so that the change step itself is handled with a subclass of something we provide and people can plug in alternatives, so it's not AD specific.

-- Scott