This message was deleted.

radius supports expired pw change, but the mfa-nps extension doesn't support changing passwords as part of the sign-in workflow https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension

nice, missed that! thank you