Use ADSelfService Plus GINA agent without VPN to change cached credentials

Is it possible to configure a GINA agent so that it changes a cached credential but doesn't require VPN connectivity?