The Password Policy authenticator allows you to reset the password during the authentication flow, if the password is expired, user will be prompted to reset the password.
...
To get started with the authenticator, go to Configuring Password Policy Authenticator Operations. Once you have completed your configurations, you can perform with the Password Policy authenticator.
To download the authenticator and other artifacts, go to https://store.wso2.com/store/assets/isconnector/passwordpolicy .