ability to change/enforce password change on next log on for all users or selected users
in the absence of SSO/MFA can at least offer this option.
many thanks