Version of FC that allows password change for IPSec user?

Anyone know if there's a version of FortiClient, licensed or not, where an IPSec VPN local user can update their password, or be forced to update it if it expires?  I have situations where remote auth is undesirable, such as for sysadmins who may need to get in to work on why remote auth is not working, but also have a need to force password changes, and whom are not FortiGate admins.