<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Hi again. BTW, you guys are great for responding to us newbies and I am most grateful.<br></div><div><br></div><div>In our use case, initial users are going to be assigned a default/random password. When they login for the first time, we would like the SSO process to detect it is a first time login (not sure how to do that -- maybe an LDAP attribute) and if so, force a password change. Is this doable with shibboleth-idp and, if so, can someone point me in the right direction?<br></div><div><br></div><div>Thanks,</div><div><br></div><div>Gene<br></div></div></body></html>