Certificate based SSO from an iPhone for Exchange with APM

I need some help getting started. Here is my problem. When users Active Directory passwords expire, their accounts will often get locked out because their iPhone continues to access the account with ...