Here's what we've got...

1-Users will login to a Lawson Portal.
2-Initial logins with a default password (based on an algorithm) should be detected and automatically redirect the user to the User App to change their password and answer their challenge questions. We still working on exactly how the Lawson Portal will do this.
3-To change a password or for a forgotten password a couple links will be available to redirect the user to the User App.

-How will the User App accept automatic population of the Username and Password fields automatically (per #2 above)? (HTTP POST, form fill, etc.)
-After completing a change password or forgotten password process, can the User App automatically redirect the user back to the referring link/page? back to the Lawson Portal login page? where can we define this?