APM AD Password Change on expired and "change at next logon" - need ideas

I've achieved something similar in a recent project. 

I've added a "change my password" checkbox to logon page that, when triggered, forcefully sets the password expired option and loops back onto logon page. This way user is able to change his password, password hints were put in "password update" page only modifying page options in policy tree .. (see 'General customization' in this guide, and explode your access profile) 

I can share config if it helps