application-pro-auth-pages-password-expired-page
A forced password rotation gate with current and new password fields, a policy panel explaining the deadline, and a reset by email fallback.