Hi sperets ,
in case of SSO, the password policy will depend on the main application.
If your users directly connect to the sisense portal, then you can implement your own password policy with the Sisense API. In API 0.9 you have the POST /users/forgetpassword or in API 1.0 you have the POST /account/begin_reset_password (actually you will probably need other API commands in the /account collection). You can also renew the API token for the users in POST /authentication/tokens/api/renew.
Hope this will help.
You can also post this requirement in the product feedback.
Best, David.