Idp force changing initial password?

[Gene Matthews]

Hi again. BTW, you guys are great for responding to us newbies and I am most grateful. 

In our use case, initial users are going to be assigned a default/random password. When they login for the first time, we would like the SSO process to detect it is a first time login (not sure how to do that -- maybe an LDAP attribute) and if so, force a password change. Is this doable with shibboleth-idp and, if so, can someone point me in the right direction? 

Thanks, 

Gene 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130820/0496eddb/attachment.html