Azure AD Connector

My requirement is to sync HR database(SQL Server on-prem) to Azure AD. I am using FIM 2010 and Windows Azure AD Connector. I am able to establish sync and all works just fine. Since this MA don’t support any password management scenario I am running PS script to set password for new accounts outside FIM. That also works well.

Next user is asked to change password during first logon. As soon as user submits new password he gets this error: “Your organization doesn’t allow you to change your password on this site. Please change your password according to the method recommended by your organization, or ask your admin if you need help.”

May I know how could I allow the user to change his password?  Am I missing something, any workaround?

Thanks,

Shobhit Vaish