I could formulate my question this way : Which attribute would be best suited to indicate a third application that the user who logs in must change his password ? Does such an attribute exist ? Best regards, -- Mikael Kermorgant