Our system allows employees to change their passwords, but not after they have expired. Enabling password changes post-expiration would be a significant improvement. Perhaps employees could use their second factor, such as MFA via the Microsoft cell phone app, to facilitate this process.