I have a few questions about NCIP Hub's requirement that external users change their password every 120 days:

• Do users still have to do this if they log in with an affiliated institution account or with Google? 
• If a user gets locked out for failing to change their password, how easy is it for them to reset it? For example, is there a link right on the login page or do they have to retrieve a password-reminder email from their inbox?

Thanks for the help! We had some external collaborators using Sharepoint years ago, but the NIH system for changing passwords every 90 days wasn't very user-friendly--people kept getting frustrated when they were locked out and then didn't want to use the site at all.