Password expiring warning with AD

[Cantor, Scott]

> Without customization on the flow, one has to click the password-changing
> link on the expiring warning page to go to the password-changing page,
> perhaps on another server.

I would say that's the very common case, yes. Most IDM teams have that sort of thing deployed separately.

> If the original URL for the "proceed" state cannot be preserved for use here,
> the user has to access the original service provider to login again.

The URL you're on is usable by some other system as a redirect back to return you to the state of the flow, if that's what you mean. It would in fact resume. So maybe that works for you?

> Assuming the password changing is easy enough to be implemented in the
> IdP service

I would say that's in fact not easy at all. Certainly not generically.

> This may need some sort of flow customization, but the interceptor is
> defined in the system folder.

You aren't really meant to customize, but to copy them as examples for your own use.

-- Scott