We currently fail to support a number of common authentication use cases in the app, such as when the user's password is expired and the user is required to change it.
This is a tech debt task to either implement native support for these other scenarios or decide how else we should handle them (say, by firing off a WebView and letting the user complete the flow on the mobile website).