Clients who use single sign-on (SSO) with the UI can restrict users from changing their password within the UI. Instead, when users attempt to reset their password, they see a message directing them to a client-specified URL.
This restriction is available only if the user is associated with just one client.