[3.23 and below]
The vault will force users to change their password on first login if users were created while this setting was enabled. After deactivating, the vault will not force password change for users created after configuration change.