currently a pure API base integration is not possible when forcing password updates.
Serivce Accounts is a huge step forward