APM V11.1HF1 querying Active Directory

Hello, not sure if you can answer this question but its regarding user challenge for password change. I have two factor authentication a two separate AD domains for user authentication. All works fine until that time when user password expired and he/she need to change it. Once it expires user no longer able to logon to any resources and no error messages are shown. Its just bring back to logon screen. Do you happen to know where in the core ( or VPE) is the option to prompt user to change password at next logon.

 

Here is log from APM :

 

info apd[6179]: 01490076:6: fc7a9c9e: AD agent: Auth (logon attempt:0): Domain password has been expired and must be changed for 'ext-khud'

 

debug apd[6179]: 01490012:7: fc7a9c9e: AD agent: LEAVE Function executeInstance

 

info apd[6179]: 01490004:6: fc7a9c9e: Executed agent '/Common/bny-apm-citrix_citrix_apm-v2_2_act_active_directory_auth_ag', return value 4

 

debug apd[6179]: 01490000:7: AccessPolicyProcessor/AccessPolicy.cpp func: "_executeOneAgent()" line: 108 Msg: user input is required

 

debug apd[6179]: 01490011:7: fc7a9c9e: Logon agent: ENTER Function executeInstance

 

debug apd[6179]: 01490012:7: fc7a9c9e: Logon agent: LEAVE Function executeInstance

 

info apd[6179]: 01490004:6: fc7a9c9e: Executed agent '/Common/bny-apm-citrix_citrix_apm-v2_2_act_logon_page_ag', return value 3

 

debug apd[6179]: 01490000:7: AccessPolicyProcessor/AccessPolicy.cpp func: "_executeOneAgent()" line: 108 Msg: user input is required