You must configure the following settings in SSPR to enable the Challenge Response Force Enrollment and the Password Expiration Notification features.
NOTE:SSPR integration features are only supported in the Active Directory environments.
Launch SSPR, in the Configuration Editor page, click Settings > Web Services > REST Services. For information about configuring the settings for REST Services, refer Configuring Extensions. You must configure all the settings that are available for REST Services.
Launch SSPR, in the Configuration Editor page, click LDAP > Active Directory > Allow Authentication When Password Expired.