The "change expired password", or "change password at first logon" functionality is only supported in the native AD connector (as it´s api based)
It does not work in the ldap authentication connector.
It does not work in the ldap authentication connector.