Force AD password reset with F5 APM

Good afternoon to everyone!

 

I have just bought one F5 APM.

 

My plan is to use it for providing access to some points of the internal network to external users.

 

Behind the APM there is one Active Directory LDAP which is used for authenticate this external users.

 

At the moment this is working well, but if one of this external users forgets his password I have to change it manually in the AD and send the user the new password. (This is not very safe)

 

I would like to give the users the option to select "I forgot my password" and generate a new one by themselves, like it's done in most webs like Facebook or Amazon for example.

 

The doubt is if I can force a new password for the user in the AD with the APM without knowing the user's old password stored in the AD.

 

This way the password is only known by the user :D

 

Can I do this with the APM???

 

If not, is there any similar solution for my problem?

 

Thanks in advantage