I need to implement a custom bootstrap 5 look and fill for english and hebrew.
APM differentiates customization options for every language, so you're compliant as long as you configure the policy for both languages. Just switch between the two using the drop-down menu when you're editing templates.
I need to implement DUO security login option in the login form.
Only for main login or on changepw as well? APM supports several MFA scenario, so this should be compliant.
If changepw portal is dedicated, I reacall having accomplished this by configuring the changepw page for two factor authentication, then after the user is authenticated use another box to force the change password option to true, and loop it back to the login page (which will trigger change password funcion)