Hello!
We are using ADSelf service but our users with password expired can't authenticate on tool.
I don't know if we forget apply any configuration, I think that tool would allow users with expired password to authenticate and so they can change the password.