Limits of SPSS Modeler Server’s Password Expiration Handling

Background

SPSS Modeler Server 18.x stores user credentials in a local database and supports role‑based access control. The server can integrate with external LDAP or Windows authentication providers, but documentation does not specify how expired credentials are processed.

Unresolved Behavior

When a user’s password expires in an external policy, the server rejects authentication but offers no built‑in prompt to change the password or reset credentials. This raises questions about the least‑privilege enforcement and user experience for expired credentials.

Key Questions

• Does the server provide any mechanism (e.g., a custom workflow, redirect, or API call) to initiate a password change when authentication fails due to expiration?
• In an LDAP‑backed deployment, how does the server detect that a password has expired, and can it trigger a password‑reset policy automatically?
• What are the implications for least‑privilege access if a user is blocked until a password is changed, and can administrators enforce a minimum password age or expiration policy through the server’s role configuration?