Hi, Jay.
We have a WIP project that strives to implement something like that, but it's not ready yet. It's done through Gluu's [custom authentication scripts](https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations/passwordExpiration/passwordExpiration-master) feature. You can check the code [here](https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations/passwordExpiration/passwordExpiration-master) and use it as an starting point for you own script.