POC for AD FS custom plugin that allows you to lockout and block password change requests on the updatepassword endpoint