I've used the API web app available on this thread and it's better then the BYOD workaround and it's also free. https://community.cisco.com/t5/identity-services-engine-ise/how-to-create-a-password-change-portal-ucp-on-ise-using-api/td-p/3926245
Many thanks, the code needs some manual adjustments but it works really great and it saves you from buying an expensive BYOD license just for this purpose.Thanks again!